# Flog Txt Version 1 # Analyzer Version: 4.5.1 # Analyzer Build Date: May 9 2022 06:24:19 # Log Creation Date: 05.07.2022 14:23:00.411 Process: id = "1" image_name = "e7ee8ff4872d57b2fba736ee6556e3f92a3fc1c3c8738c50cc8b1e6acbb4379f.exe" filename = "c:\\users\\keecfmwgj\\desktop\\e7ee8ff4872d57b2fba736ee6556e3f92a3fc1c3c8738c50cc8b1e6acbb4379f.exe" page_root = "0x441a7000" os_pid = "0xf98" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x788" cmd_line = "\"C:\\Users\\kEecfMwgj\\Desktop\\e7ee8ff4872d57b2fba736ee6556e3f92a3fc1c3c8738c50cc8b1e6acbb4379f.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f2de" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 114 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 115 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 116 start_va = 0x40000 end_va = 0x40fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 117 start_va = 0x50000 end_va = 0x8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 118 start_va = 0x90000 end_va = 0x18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 119 start_va = 0x190000 end_va = 0x193fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 120 start_va = 0x1a0000 end_va = 0x1a1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 121 start_va = 0x400000 end_va = 0x497fff monitored = 1 entry_point = 0x40352d region_type = mapped_file name = "e7ee8ff4872d57b2fba736ee6556e3f92a3fc1c3c8738c50cc8b1e6acbb4379f.exe" filename = "\\Users\\kEecfMwgj\\Desktop\\e7ee8ff4872d57b2fba736ee6556e3f92a3fc1c3c8738c50cc8b1e6acbb4379f.exe" (normalized: "c:\\users\\keecfmwgj\\desktop\\e7ee8ff4872d57b2fba736ee6556e3f92a3fc1c3c8738c50cc8b1e6acbb4379f.exe") Region: id = 122 start_va = 0x76f70000 end_va = 0x77118fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 123 start_va = 0x77150000 end_va = 0x772cffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 124 start_va = 0x7efb0000 end_va = 0x7efd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 125 start_va = 0x7efdb000 end_va = 0x7efddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 126 start_va = 0x7efde000 end_va = 0x7efdefff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 127 start_va = 0x7efdf000 end_va = 0x7efdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 128 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 129 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 130 start_va = 0x7fff0000 end_va = 0x7fffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 270 start_va = 0x210000 end_va = 0x28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 271 start_va = 0x749d0000 end_va = 0x749d7fff monitored = 0 entry_point = 0x749d20f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 272 start_va = 0x749e0000 end_va = 0x74a3bfff monitored = 0 entry_point = 0x74a1f9f4 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 273 start_va = 0x74a40000 end_va = 0x74a7efff monitored = 0 entry_point = 0x74a6e088 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 274 start_va = 0x76e50000 end_va = 0x76f6efff monitored = 0 entry_point = 0x76e65340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 275 start_va = 0x75620000 end_va = 0x7572ffff monitored = 0 entry_point = 0x75633283 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 276 start_va = 0x76e50000 end_va = 0x76f6efff monitored = 0 entry_point = 0x76e65340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 277 start_va = 0x76e50000 end_va = 0x76f6efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000076e50000" filename = "" Region: id = 278 start_va = 0x76d50000 end_va = 0x76e49fff monitored = 0 entry_point = 0x76d6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 279 start_va = 0x76d50000 end_va = 0x76e49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000076d50000" filename = "" Region: id = 280 start_va = 0x290000 end_va = 0x3effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000290000" filename = "" Region: id = 281 start_va = 0x75620000 end_va = 0x7572ffff monitored = 0 entry_point = 0x75633283 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 282 start_va = 0x74dc0000 end_va = 0x74e06fff monitored = 0 entry_point = 0x74dc74c1 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 283 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 284 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 285 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 286 start_va = 0x4a0000 end_va = 0x506fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 287 start_va = 0x767e0000 end_va = 0x7687ffff monitored = 0 entry_point = 0x767f49e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 288 start_va = 0x752c0000 end_va = 0x7536bfff monitored = 0 entry_point = 0x752ca472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 289 start_va = 0x74e10000 end_va = 0x74e28fff monitored = 0 entry_point = 0x74e14975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 290 start_va = 0x76450000 end_va = 0x7653ffff monitored = 0 entry_point = 0x76460569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 291 start_va = 0x74ca0000 end_va = 0x74cfffff monitored = 0 entry_point = 0x74cba3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 292 start_va = 0x74c90000 end_va = 0x74c9bfff monitored = 0 entry_point = 0x74c910e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 293 start_va = 0x75730000 end_va = 0x76379fff monitored = 0 entry_point = 0x757b1601 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 294 start_va = 0x76540000 end_va = 0x76596fff monitored = 0 entry_point = 0x76559ba6 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 295 start_va = 0x76ae0000 end_va = 0x76b6ffff monitored = 0 entry_point = 0x76af6343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 296 start_va = 0x74f70000 end_va = 0x7506ffff monitored = 0 entry_point = 0x74f8b6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 297 start_va = 0x77120000 end_va = 0x77129fff monitored = 0 entry_point = 0x771236a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 298 start_va = 0x76740000 end_va = 0x767dcfff monitored = 0 entry_point = 0x76773fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 299 start_va = 0x75370000 end_va = 0x754cbfff monitored = 0 entry_point = 0x753bba3d region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 300 start_va = 0x73d70000 end_va = 0x73f0dfff monitored = 0 entry_point = 0x73d9e6b5 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 301 start_va = 0x510000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 302 start_va = 0x5f0000 end_va = 0x777fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005f0000" filename = "" Region: id = 303 start_va = 0x20000 end_va = 0x3dfff monitored = 0 entry_point = 0x3158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 304 start_va = 0x20000 end_va = 0x3dfff monitored = 0 entry_point = 0x3158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 305 start_va = 0x769f0000 end_va = 0x76a4ffff monitored = 0 entry_point = 0x76a0158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 306 start_va = 0x76380000 end_va = 0x7644bfff monitored = 0 entry_point = 0x7638168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 307 start_va = 0x780000 end_va = 0x900fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000780000" filename = "" Region: id = 308 start_va = 0x910000 end_va = 0x1d0ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000910000" filename = "" Region: id = 309 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 310 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 311 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 312 start_va = 0x1c0000 end_va = 0x1c1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 313 start_va = 0x73bb0000 end_va = 0x73c2ffff monitored = 0 entry_point = 0x73bc37c9 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 314 start_va = 0x510000 end_va = 0x59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 315 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 316 start_va = 0x74b70000 end_va = 0x74b86fff monitored = 0 entry_point = 0x74b71c9d region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\SysWOW64\\userenv.dll" (normalized: "c:\\windows\\syswow64\\userenv.dll") Region: id = 317 start_va = 0x73d60000 end_va = 0x73d6afff monitored = 0 entry_point = 0x73d61992 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 318 start_va = 0x765a0000 end_va = 0x7673cfff monitored = 0 entry_point = 0x765a17e7 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\SysWOW64\\setupapi.dll" (normalized: "c:\\windows\\syswow64\\setupapi.dll") Region: id = 319 start_va = 0x75070000 end_va = 0x75096fff monitored = 0 entry_point = 0x750758b9 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 320 start_va = 0x76a50000 end_va = 0x76adefff monitored = 0 entry_point = 0x76a53fb1 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 321 start_va = 0x750a0000 end_va = 0x750b1fff monitored = 0 entry_point = 0x750a1441 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll") Region: id = 322 start_va = 0x1b0000 end_va = 0x1bcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "setupapi.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\setupapi.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\setupapi.dll.mui") Region: id = 323 start_va = 0x73970000 end_va = 0x739bbfff monitored = 0 entry_point = 0x73972c14 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 324 start_va = 0x73800000 end_va = 0x738f4fff monitored = 0 entry_point = 0x73810d9e region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\SysWOW64\\propsys.dll" (normalized: "c:\\windows\\syswow64\\propsys.dll") Region: id = 325 start_va = 0x73b40000 end_va = 0x73b52fff monitored = 0 entry_point = 0x73b41d3f region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 326 start_va = 0x73f10000 end_va = 0x73f4bfff monitored = 0 entry_point = 0x73f13089 region_type = mapped_file name = "oleacc.dll" filename = "\\Windows\\SysWOW64\\oleacc.dll" (normalized: "c:\\windows\\syswow64\\oleacc.dll") Region: id = 327 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "oleaccrc.dll" filename = "\\Windows\\SysWOW64\\oleaccrc.dll" (normalized: "c:\\windows\\syswow64\\oleaccrc.dll") Region: id = 328 start_va = 0x76880000 end_va = 0x76902fff monitored = 0 entry_point = 0x768823d2 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 329 start_va = 0x73d30000 end_va = 0x73d50fff monitored = 0 entry_point = 0x73d3145e region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll") Region: id = 330 start_va = 0x74d00000 end_va = 0x74d44fff monitored = 0 entry_point = 0x74d011e1 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\SysWOW64\\Wldap32.dll" (normalized: "c:\\windows\\syswow64\\wldap32.dll") Region: id = 331 start_va = 0x73ca0000 end_va = 0x73ca8fff monitored = 0 entry_point = 0x73ca1220 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 332 start_va = 0x74b60000 end_va = 0x74b64fff monitored = 0 entry_point = 0x74b611d0 region_type = mapped_file name = "shfolder.dll" filename = "\\Windows\\SysWOW64\\shfolder.dll" (normalized: "c:\\windows\\syswow64\\shfolder.dll") Region: id = 333 start_va = 0x1d10000 end_va = 0x1deefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001d10000" filename = "" Region: id = 334 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 335 start_va = 0x1df0000 end_va = 0x20befff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 336 start_va = 0x1f0000 end_va = 0x1f1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001f0000" filename = "" Region: id = 337 start_va = 0x290000 end_va = 0x2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000290000" filename = "" Region: id = 338 start_va = 0x2f0000 end_va = 0x3effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002f0000" filename = "" Region: id = 339 start_va = 0x20c0000 end_va = 0x21bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020c0000" filename = "" Region: id = 340 start_va = 0x7efd8000 end_va = 0x7efdafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 341 start_va = 0x200000 end_va = 0x200fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000200000" filename = "" Region: id = 342 start_va = 0x2d0000 end_va = 0x2d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 343 start_va = 0x2e0000 end_va = 0x2e3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 344 start_va = 0x510000 end_va = 0x526fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000008.db" filename = "\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000008.db" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000008.db") Region: id = 345 start_va = 0x560000 end_va = 0x59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000560000" filename = "" Region: id = 346 start_va = 0x3f0000 end_va = 0x3f0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 347 start_va = 0x21c0000 end_va = 0x22c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000021c0000" filename = "" Region: id = 348 start_va = 0x5a0000 end_va = 0x5dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Region: id = 349 start_va = 0x21c0000 end_va = 0x22bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000021c0000" filename = "" Region: id = 350 start_va = 0x22c0000 end_va = 0x23c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022c0000" filename = "" Region: id = 351 start_va = 0x7efd5000 end_va = 0x7efd7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Region: id = 352 start_va = 0x22c0000 end_va = 0x23c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022c0000" filename = "" Region: id = 353 start_va = 0x22c0000 end_va = 0x23c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022c0000" filename = "" Region: id = 354 start_va = 0x22c0000 end_va = 0x23c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022c0000" filename = "" Region: id = 355 start_va = 0x22c0000 end_va = 0x23c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022c0000" filename = "" Region: id = 356 start_va = 0x22c0000 end_va = 0x23c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022c0000" filename = "" Region: id = 357 start_va = 0x74ae0000 end_va = 0x74b55fff monitored = 0 entry_point = 0x74ae16bb region_type = mapped_file name = "riched20.dll" filename = "\\Windows\\SysWOW64\\riched20.dll" (normalized: "c:\\windows\\syswow64\\riched20.dll") Region: id = 358 start_va = 0x22c0000 end_va = 0x230ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022c0000" filename = "" Region: id = 359 start_va = 0x2e0000 end_va = 0x2e4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\user32.dll.mui") Region: id = 360 start_va = 0x2310000 end_va = 0x238ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002310000" filename = "" Region: id = 361 start_va = 0x2390000 end_va = 0x2cbffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 362 start_va = 0x2cc0000 end_va = 0x2cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002cc0000" filename = "" Region: id = 363 start_va = 0x2d00000 end_va = 0x2dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002d00000" filename = "" Region: id = 364 start_va = 0x7efad000 end_va = 0x7efaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efad000" filename = "" Region: id = 365 start_va = 0x530000 end_va = 0x532fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000530000" filename = "" Region: id = 366 start_va = 0x530000 end_va = 0x532fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000530000" filename = "" Region: id = 367 start_va = 0x74ad0000 end_va = 0x74ad6fff monitored = 1 entry_point = 0x74ad2a7f region_type = mapped_file name = "system.dll" filename = "\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\nszc5ad.tmp\\system.dll") Region: id = 368 start_va = 0x2e00000 end_va = 0x2efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002e00000" filename = "" Region: id = 369 start_va = 0x2f00000 end_va = 0x2f80fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002f00000" filename = "" Region: id = 370 start_va = 0x2f90000 end_va = 0x1c695fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002f90000" filename = "" Region: id = 371 start_va = 0x754e0000 end_va = 0x754e4fff monitored = 0 entry_point = 0x754e1438 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 372 start_va = 0x72790000 end_va = 0x729cffff monitored = 0 entry_point = 0x727966bd region_type = mapped_file name = "msi.dll" filename = "\\Windows\\SysWOW64\\msi.dll" (normalized: "c:\\windows\\syswow64\\msi.dll") Region: id = 373 start_va = 0x1c6a0000 end_va = 0x1c6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c6a0000" filename = "" Region: id = 374 start_va = 0x1c6e0000 end_va = 0x1c7dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c6e0000" filename = "" Region: id = 375 start_va = 0x7efaa000 end_va = 0x7efacfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efaa000" filename = "" Thread: id = 1 os_tid = 0xf9c [0056.683] SetErrorMode (uMode=0x8001) returned 0x0 [0056.712] GetVersionExW (in: lpVersionInformation=0x18fe48*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18fe48*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0056.713] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x75620000 [0056.713] GetProcAddress (hModule=0x75620000, lpProcName="SetDefaultDllDirectories") returned 0x74dd208a [0056.713] SetDefaultDllDirectories (DirectoryFlags=0xc00) returned 1 [0056.713] GetSystemDirectoryW (in: lpBuffer=0x18f940, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0056.713] wsprintfW (in: param_1=0x18f966, param_2="%s%S.dll" | out: param_1="\\UXTHEME.dll") returned 12 [0056.718] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\UXTHEME.dll", hFile=0x0, dwFlags=0x8) returned 0x73bb0000 [0057.359] lstrlenA (lpString="UXTHEME") returned 7 [0057.359] GetSystemDirectoryW (in: lpBuffer=0x18f940, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0057.359] wsprintfW (in: param_1=0x18f966, param_2="%s%S.dll" | out: param_1="\\USERENV.dll") returned 12 [0057.359] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\USERENV.dll", hFile=0x0, dwFlags=0x8) returned 0x74b70000 [0057.792] lstrlenA (lpString="USERENV") returned 7 [0057.792] GetSystemDirectoryW (in: lpBuffer=0x18f940, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0057.792] wsprintfW (in: param_1=0x18f966, param_2="%s%S.dll" | out: param_1="\\SETUPAPI.dll") returned 13 [0057.792] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\SETUPAPI.dll", hFile=0x0, dwFlags=0x8) returned 0x765a0000 [0059.486] lstrlenA (lpString="SETUPAPI") returned 8 [0059.486] GetSystemDirectoryW (in: lpBuffer=0x18f940, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0059.486] wsprintfW (in: param_1=0x18f966, param_2="%s%S.dll" | out: param_1="\\APPHELP.dll") returned 12 [0059.486] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\APPHELP.dll", hFile=0x0, dwFlags=0x8) returned 0x73970000 [0059.824] lstrlenA (lpString="APPHELP") returned 7 [0059.824] GetSystemDirectoryW (in: lpBuffer=0x18f940, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0059.825] wsprintfW (in: param_1=0x18f966, param_2="%s%S.dll" | out: param_1="\\PROPSYS.dll") returned 12 [0059.825] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\PROPSYS.dll", hFile=0x0, dwFlags=0x8) returned 0x73800000 [0060.224] lstrlenA (lpString="PROPSYS") returned 7 [0060.225] GetSystemDirectoryW (in: lpBuffer=0x18f940, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.225] wsprintfW (in: param_1=0x18f966, param_2="%s%S.dll" | out: param_1="\\DWMAPI.dll") returned 11 [0060.225] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\DWMAPI.dll", hFile=0x0, dwFlags=0x8) returned 0x73b40000 [0060.398] lstrlenA (lpString="DWMAPI") returned 6 [0060.398] GetSystemDirectoryW (in: lpBuffer=0x18f940, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.398] wsprintfW (in: param_1=0x18f966, param_2="%s%S.dll" | out: param_1="\\CRYPTBASE.dll") returned 14 [0060.398] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\CRYPTBASE.dll", hFile=0x0, dwFlags=0x8) returned 0x74c90000 [0060.399] lstrlenA (lpString="CRYPTBASE") returned 9 [0060.399] GetSystemDirectoryW (in: lpBuffer=0x18f940, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.399] wsprintfW (in: param_1=0x18f966, param_2="%s%S.dll" | out: param_1="\\OLEACC.dll") returned 11 [0060.399] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\OLEACC.dll", hFile=0x0, dwFlags=0x8) returned 0x73f10000 [0060.806] lstrlenA (lpString="OLEACC") returned 6 [0060.806] GetSystemDirectoryW (in: lpBuffer=0x18f940, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0060.806] wsprintfW (in: param_1=0x18f966, param_2="%s%S.dll" | out: param_1="\\CLBCATQ.dll") returned 12 [0060.806] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\CLBCATQ.dll", hFile=0x0, dwFlags=0x8) returned 0x76880000 [0061.174] lstrlenA (lpString="CLBCATQ") returned 7 [0061.174] GetSystemDirectoryW (in: lpBuffer=0x18f940, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0061.174] wsprintfW (in: param_1=0x18f966, param_2="%s%S.dll" | out: param_1="\\NTMARTA.dll") returned 12 [0061.174] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\NTMARTA.dll", hFile=0x0, dwFlags=0x8) returned 0x73d30000 [0061.571] lstrlenA (lpString="NTMARTA") returned 7 [0061.571] GetModuleHandleA (lpModuleName="VERSION") returned 0x0 [0061.571] GetSystemDirectoryW (in: lpBuffer=0x18f930, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0061.571] wsprintfW (in: param_1=0x18f956, param_2="%s%S.dll" | out: param_1="\\VERSION.dll") returned 12 [0061.571] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\VERSION.dll", hFile=0x0, dwFlags=0x8) returned 0x73ca0000 [0061.708] GetProcAddress (hModule=0x73ca0000, lpProcName="GetFileVersionInfoW") returned 0x73ca19f4 [0061.708] GetModuleHandleA (lpModuleName="SHFOLDER") returned 0x0 [0061.709] GetSystemDirectoryW (in: lpBuffer=0x18f930, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0061.709] wsprintfW (in: param_1=0x18f956, param_2="%s%S.dll" | out: param_1="\\SHFOLDER.dll") returned 13 [0061.709] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\SHFOLDER.dll", hFile=0x0, dwFlags=0x8) returned 0x74b60000 [0061.792] GetProcAddress (hModule=0x74b60000, lpProcName="SHGetFolderPathW") returned 0x74b613ac [0061.793] GetModuleHandleA (lpModuleName="SHLWAPI") returned 0x76540000 [0061.793] GetProcAddress (hModule=0x76540000, lpProcName=0x1b5) returned 0x7655bee6 [0061.793] IsOS (dwOS=0x1e) returned 1 [0061.794] InitCommonControls () [0061.794] OleInitialize (pvReserved=0x0) returned 0x0 [0061.851] SHGetFileInfoW (in: pszPath="", dwFileAttributes=0x0, psfi=0x18fb94, cbFileInfo=0x2b4, uFlags=0x0 | out: psfi=0x18fb94) returned 0x1 [0061.973] lstrcpynW (in: lpString1=0x433f00, lpString2="NSIS Error", iMaxLength=1024 | out: lpString1="NSIS Error") returned="NSIS Error" [0061.973] GetCommandLineW () returned="\"C:\\Users\\kEecfMwgj\\Desktop\\e7ee8ff4872d57b2fba736ee6556e3f92a3fc1c3c8738c50cc8b1e6acbb4379f.exe\" " [0061.973] lstrcpynW (in: lpString1=0x440000, lpString2="\"C:\\Users\\kEecfMwgj\\Desktop\\e7ee8ff4872d57b2fba736ee6556e3f92a3fc1c3c8738c50cc8b1e6acbb4379f.exe\" ", iMaxLength=1024 | out: lpString1="\"C:\\Users\\kEecfMwgj\\Desktop\\e7ee8ff4872d57b2fba736ee6556e3f92a3fc1c3c8738c50cc8b1e6acbb4379f.exe\" ") returned="\"C:\\Users\\kEecfMwgj\\Desktop\\e7ee8ff4872d57b2fba736ee6556e3f92a3fc1c3c8738c50cc8b1e6acbb4379f.exe\" " [0061.976] GetTempPathW (in: nBufferLength=0x400, lpBuffer=0x442800 | out: lpBuffer="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\") returned 0x25 [0061.980] lstrlenW (lpString="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp") returned 36 [0061.981] lstrcatW (in: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp", lpString2="\\" | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\" [0061.981] CreateDirectoryW (lpPathName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp"), lpSecurityAttributes=0x0) returned 0 [0061.981] GetLastError () returned 0xb7 [0061.981] GetTickCount () returned 0x206c3f4 [0061.981] GetTempFileNameW (in: lpPathName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\", lpPrefixString="nse", uUnique=0x0, lpTempFileName=0x442000 | out: lpTempFileName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nseC3F4.tmp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\nsec3f4.tmp")) returned 0xc3f4 [0061.986] DeleteFileW (lpFileName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nseC3F4.tmp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\nsec3f4.tmp")) returned 1 [0061.986] GetTickCount () returned 0x206c404 [0061.987] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x443800, nSize=0x400 | out: lpFilename="C:\\Users\\kEecfMwgj\\Desktop\\e7ee8ff4872d57b2fba736ee6556e3f92a3fc1c3c8738c50cc8b1e6acbb4379f.exe" (normalized: "c:\\users\\keecfmwgj\\desktop\\e7ee8ff4872d57b2fba736ee6556e3f92a3fc1c3c8738c50cc8b1e6acbb4379f.exe")) returned 0x5f [0061.987] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\e7ee8ff4872d57b2fba736ee6556e3f92a3fc1c3c8738c50cc8b1e6acbb4379f.exe" (normalized: "c:\\users\\keecfmwgj\\desktop\\e7ee8ff4872d57b2fba736ee6556e3f92a3fc1c3c8738c50cc8b1e6acbb4379f.exe")) returned 0x20 [0061.987] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\e7ee8ff4872d57b2fba736ee6556e3f92a3fc1c3c8738c50cc8b1e6acbb4379f.exe" (normalized: "c:\\users\\keecfmwgj\\desktop\\e7ee8ff4872d57b2fba736ee6556e3f92a3fc1c3c8738c50cc8b1e6acbb4379f.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x180 [0061.987] lstrcpynW (in: lpString1=0x441800, lpString2="C:\\Users\\kEecfMwgj\\Desktop\\e7ee8ff4872d57b2fba736ee6556e3f92a3fc1c3c8738c50cc8b1e6acbb4379f.exe", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Desktop\\e7ee8ff4872d57b2fba736ee6556e3f92a3fc1c3c8738c50cc8b1e6acbb4379f.exe") returned="C:\\Users\\kEecfMwgj\\Desktop\\e7ee8ff4872d57b2fba736ee6556e3f92a3fc1c3c8738c50cc8b1e6acbb4379f.exe" [0061.987] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Desktop\\e7ee8ff4872d57b2fba736ee6556e3f92a3fc1c3c8738c50cc8b1e6acbb4379f.exe") returned 95 [0061.989] lstrcpynW (in: lpString1=0x444000, lpString2="e7ee8ff4872d57b2fba736ee6556e3f92a3fc1c3c8738c50cc8b1e6acbb4379f.exe", iMaxLength=1024 | out: lpString1="e7ee8ff4872d57b2fba736ee6556e3f92a3fc1c3c8738c50cc8b1e6acbb4379f.exe") returned="e7ee8ff4872d57b2fba736ee6556e3f92a3fc1c3c8738c50cc8b1e6acbb4379f.exe" [0061.990] GetFileSize (in: hFile=0x180, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4c020 [0061.990] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.991] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.991] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.991] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.991] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.991] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.991] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.991] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.991] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.991] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.991] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.992] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.992] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.992] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.992] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.992] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.992] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.992] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.992] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.992] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.992] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.992] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.992] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.992] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.992] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.992] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.992] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.992] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.993] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.993] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.993] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.993] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.993] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.993] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.993] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.993] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.993] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.993] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.993] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.993] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.993] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.993] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.993] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.993] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.993] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.993] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.994] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.994] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.994] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.994] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.994] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.994] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.994] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.994] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.994] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.994] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.994] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.994] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.994] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.994] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.994] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.994] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.994] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.995] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.995] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.995] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.995] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.995] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.995] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.995] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.995] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.995] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.995] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.995] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.995] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.995] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.995] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.995] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.995] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.995] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.995] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.996] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.996] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.996] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.996] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.996] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.996] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.996] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.996] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.996] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.996] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.996] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.996] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.996] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.996] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.996] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.996] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.996] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.997] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.997] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.997] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.997] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.997] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.997] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.997] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.997] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.997] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.997] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.997] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.997] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.997] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.997] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.997] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.997] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.997] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.998] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.998] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.998] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.998] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.998] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.998] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.998] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.998] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.998] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.998] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.998] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.998] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.998] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.998] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.998] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.998] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.999] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.999] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.999] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.999] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.999] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.999] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.999] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.999] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.999] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.999] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.999] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.999] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.999] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0061.999] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.000] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.000] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.000] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.000] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.000] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.001] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.001] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.001] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.001] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.001] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.001] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.001] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.001] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.001] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.001] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.001] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.001] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.001] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.001] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.001] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.001] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.001] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.002] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.002] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.002] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.002] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.002] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.002] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.002] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.002] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.002] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.002] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.002] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.002] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.002] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.002] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.002] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.002] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.002] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.002] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.003] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.003] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.003] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.003] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.003] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.003] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.003] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.003] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.003] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.003] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.003] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.003] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.003] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.003] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.003] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.003] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.003] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.004] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.004] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.004] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.004] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.004] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.004] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.004] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.004] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.004] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.004] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.004] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.004] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.004] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.004] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.004] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.004] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.005] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.005] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.005] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.005] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.005] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.005] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.005] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.005] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.005] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.005] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.005] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.005] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.005] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.005] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.005] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.005] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.005] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.006] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.006] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.006] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.006] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.006] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.006] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.006] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.006] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.006] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.006] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.006] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.006] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.006] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.006] ReadFile (in: hFile=0x180, lpBuffer=0x416a18, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x18fb38, lpOverlapped=0x0 | out: lpBuffer=0x416a18*, lpNumberOfBytesRead=0x18fb38*=0x200, lpOverlapped=0x0) returned 1 [0062.011] SetFilePointer (in: hFile=0x180, lDistanceToMove=201244, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x3121c [0062.013] GetUserDefaultUILanguage () returned 0x409 [0062.013] wsprintfW (in: param_1=0x442000, param_2="%d" | out: param_1="1033") returned 4 [0062.013] wsprintfW (in: param_1=0x442000, param_2="%d" | out: param_1="1033") returned 4 [0062.013] lstrcpynW (in: lpString1=0x433f00, lpString2="Microkode", iMaxLength=1024 | out: lpString1="Microkode") returned="Microkode" [0062.014] SetWindowTextW (hWnd=0x0, lpString="Microkode") returned 0 [0062.015] lstrcpynW (in: lpString1=0x330434, lpString2="Giza", iMaxLength=1024 | out: lpString1="Giza") returned="Giza" [0062.015] lstrcpynW (in: lpString1=0x330c4c, lpString2="Dieu", iMaxLength=1024 | out: lpString1="Dieu") returned="Dieu" [0062.015] lstrcpynW (in: lpString1=0x331464, lpString2="Heved", iMaxLength=1024 | out: lpString1="Heved") returned="Heved" [0062.016] lstrcpynW (in: lpString1=0x331c7c, lpString2="dharmasmriti", iMaxLength=1024 | out: lpString1="dharmasmriti") returned="dharmasmriti" [0062.016] lstrcpynW (in: lpString1=0x332494, lpString2="Dyrkelig", iMaxLength=1024 | out: lpString1="Dyrkelig") returned="Dyrkelig" [0062.016] lstrcpynW (in: lpString1=0x332cac, lpString2="Gennemsnitsvrdierne", iMaxLength=1024 | out: lpString1="Gennemsnitsvrdierne") returned="Gennemsnitsvrdierne" [0062.016] lstrcpynW (in: lpString1=0x3334c4, lpString2="Bramfriere", iMaxLength=1024 | out: lpString1="Bramfriere") returned="Bramfriere" [0062.016] lstrcpynW (in: lpString1=0x333cdc, lpString2="skrkfilmens", iMaxLength=1024 | out: lpString1="skrkfilmens") returned="skrkfilmens" [0062.016] lstrcpynW (in: lpString1=0x42fa70, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.016] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Brneordfrer\\Guldhveps", ulOptions=0x0, samDesired=0x20019, phkResult=0x18fb60 | out: phkResult=0x18fb60*=0x0) returned 0x2 [0062.016] lstrcpynW (in: lpString1=0x42fa70, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.016] SHGetFolderPathW (in: hwnd=0x0, csidl=14, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj\\Videos") returned 0x0 [0062.018] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Videos") returned 25 [0062.018] lstrcpynW (in: lpString1=0x440800, lpString2="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned" [0062.018] LoadImageW (hInst=0x400000, name=0x67, type=0x1, cx=0, cy=0, fuLoad=0x8040) returned 0x60069 [0062.020] wsprintfW (in: param_1=0x442000, param_2="%d" | out: param_1="1033") returned 4 [0062.020] lstrcpynW (in: lpString1=0x433f00, lpString2="Microkode", iMaxLength=1024 | out: lpString1="Microkode") returned="Microkode" [0062.020] SetWindowTextW (hWnd=0x0, lpString="Microkode") returned 0 [0062.020] lstrcpynW (in: lpString1=0x330434, lpString2="Giza", iMaxLength=1024 | out: lpString1="Giza") returned="Giza" [0062.020] lstrcpynW (in: lpString1=0x330c4c, lpString2="Dieu", iMaxLength=1024 | out: lpString1="Dieu") returned="Dieu" [0062.020] lstrcpynW (in: lpString1=0x331464, lpString2="Heved", iMaxLength=1024 | out: lpString1="Heved") returned="Heved" [0062.020] lstrcpynW (in: lpString1=0x331c7c, lpString2="dharmasmriti", iMaxLength=1024 | out: lpString1="dharmasmriti") returned="dharmasmriti" [0062.020] lstrcpynW (in: lpString1=0x332494, lpString2="Dyrkelig", iMaxLength=1024 | out: lpString1="Dyrkelig") returned="Dyrkelig" [0062.020] lstrcpynW (in: lpString1=0x332cac, lpString2="Gennemsnitsvrdierne", iMaxLength=1024 | out: lpString1="Gennemsnitsvrdierne") returned="Gennemsnitsvrdierne" [0062.020] lstrcpynW (in: lpString1=0x3334c4, lpString2="Bramfriere", iMaxLength=1024 | out: lpString1="Bramfriere") returned="Bramfriere" [0062.021] lstrcpynW (in: lpString1=0x333cdc, lpString2="skrkfilmens", iMaxLength=1024 | out: lpString1="skrkfilmens") returned="skrkfilmens" [0062.021] ShowWindow (hWnd=0x0, nCmdShow=5) returned 0 [0062.021] GetSystemDirectoryW (in: lpBuffer=0x18f91c, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0062.021] wsprintfW (in: param_1=0x18f942, param_2="%s%S.dll" | out: param_1="\\RichEd20.dll") returned 13 [0062.021] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\RichEd20.dll", hFile=0x0, dwFlags=0x8) returned 0x74ae0000 [0062.468] GetClassInfoW (in: hInstance=0x0, lpClassName="RichEdit20W", lpWndClass=0x433ea0 | out: lpWndClass=0x433ea0) returned 1 [0062.468] DialogBoxParamW (hInstance=0x400000, lpTemplateName=0x69, hWndParent=0x0, lpDialogFunc=0x403f9a, dwInitParam=0x0) [0062.510] GetDlgItem (hDlg=0x80062, nIDDlgItem=1) returned 0x80052 [0062.510] GetDlgItem (hDlg=0x80062, nIDDlgItem=2) returned 0x40066 [0062.511] SetDlgItemTextW (hDlg=0x80062, nIDDlgItem=1028, lpString="Uopsigelig5") returned 1 [0062.511] SetClassLongW (hWnd=0x80062, nIndex=-14, dwNewLong=393321) returned 0x0 [0062.512] lstrcpynW (in: lpString1=0x445000, lpString2="Click Next to continue.", iMaxLength=1024 | out: lpString1="Click Next to continue.") returned="Click Next to continue." [0062.512] SetDlgItemTextW (hDlg=0x80062, nIDDlgItem=1, lpString="&Close") returned 1 [0062.513] SetDlgItemTextW (hDlg=0x80062, nIDDlgItem=3, lpString="") returned 1 [0062.513] SetDlgItemTextW (hDlg=0x80062, nIDDlgItem=2, lpString="Cancel") returned 1 [0062.513] GetDlgItem (hDlg=0x80062, nIDDlgItem=3) returned 0x5005e [0062.513] ShowWindow (hWnd=0x5005e, nCmdShow=0) returned 0 [0062.513] EnableWindow (hWnd=0x5005e, bEnable=0) returned 0 [0062.513] EnableWindow (hWnd=0x80052, bEnable=0) returned 0 [0062.513] EnableWindow (hWnd=0x40066, bEnable=0) returned 0 [0062.513] GetSystemMenu (hWnd=0x80062, bRevert=0) returned 0x302af [0062.513] EnableMenuItem (hMenu=0x302af, uIDEnableItem=0xf060, uEnable=0x1) returned 0 [0062.513] SendMessageW (hWnd=0x5005e, Msg=0xf4, wParam=0x0, lParam=0x1) returned 0x0 [0062.514] SendMessageW (hWnd=0x80062, Msg=0x28, wParam=0x80052, lParam=0x1) returned 0x1 [0062.514] lstrcpynW (in: lpString1=0x433f00, lpString2="Microkode", iMaxLength=1024 | out: lpString1="Microkode") returned="Microkode" [0062.514] SetWindowTextW (hWnd=0x0, lpString="Microkode") returned 0 [0062.514] lstrcpynW (in: lpString1=0x42d268, lpString2="Microkode", iMaxLength=1024 | out: lpString1="Microkode") returned="Microkode" [0062.514] lstrlenW (lpString="Microkode") returned 9 [0062.515] lstrcpynW (in: lpString1=0x42d27a, lpString2=": Installing", iMaxLength=1024 | out: lpString1=": Installing") returned=": Installing" [0062.515] SetWindowTextW (hWnd=0x80062, lpString="Microkode: Installing") returned 1 [0062.515] DestroyWindow (hWnd=0x0) returned 0 [0062.515] CreateDialogParamW (hInstance=0x400000, lpTemplateName=0x6a, hWndParent=0x80062, lpDialogFunc=0x4056de, dwInitParam=0x33039c) returned 0x3031e [0062.590] GetDlgItem (hDlg=0x3031e, nIDDlgItem=1027) returned 0x30318 [0062.590] GetDlgItem (hDlg=0x3031e, nIDDlgItem=1006) returned 0x20328 [0062.590] GetDlgItem (hDlg=0x3031e, nIDDlgItem=1016) returned 0x2031a [0062.591] SendMessageW (hWnd=0x80062, Msg=0x28, wParam=0x30318, lParam=0x1) returned 0x1 [0062.605] GetClientRect (in: hWnd=0x2031a, lpRect=0x18f484 | out: lpRect=0x18f484) returned 1 [0062.605] GetSystemMetrics (nIndex=2) returned 17 [0062.605] SendMessageW (hWnd=0x2031a, Msg=0x1061, wParam=0x0, lParam=0x18f464) returned 0x0 [0062.605] SendMessageW (hWnd=0x2031a, Msg=0x1036, wParam=0x4000, lParam=0x4000) returned 0x0 [0062.606] SendMessageW (hWnd=0x2031a, Msg=0x1001, wParam=0x0, lParam=0x0) returned 0x1 [0062.606] SendMessageW (hWnd=0x2031a, Msg=0x1026, wParam=0x0, lParam=0x0) returned 0x1 [0062.606] SendMessageW (hWnd=0x2031a, Msg=0x1024, wParam=0x0, lParam=0xff00) returned 0x1 [0062.606] SetDlgItemTextW (hDlg=0x3031e, nIDDlgItem=1027, lpString="Show &details") returned 1 [0062.606] ShowWindow (hWnd=0x30318, nCmdShow=0) returned 1 [0062.607] ShowWindow (hWnd=0x2031a, nCmdShow=8) returned 0 [0062.607] SendMessageW (hWnd=0x80062, Msg=0x28, wParam=0x20328, lParam=0x1) returned 0x1 [0062.608] GetDlgItem (hDlg=0x3031e, nIDDlgItem=1004) returned 0x20326 [0062.608] SendMessageW (hWnd=0x20326, Msg=0x401, wParam=0x0, lParam=0x75300000) returned 0x640000 [0062.608] SetDlgItemTextW (hDlg=0x3031e, nIDDlgItem=1006, lpString="") returned 1 [0062.608] GetDlgItem (hDlg=0x80062, nIDDlgItem=1018) returned 0xa0136 [0062.608] GetWindowRect (in: hWnd=0xa0136, lpRect=0x18f7ec | out: lpRect=0x18f7ec) returned 1 [0062.608] ScreenToClient (in: hWnd=0x80062, lpPoint=0x18f7ec | out: lpPoint=0x18f7ec) returned 1 [0062.608] SetWindowPos (hWnd=0x3031e, hWndInsertAfter=0x0, X=11, Y=10, cx=0, cy=0, uFlags=0x15) returned 1 [0062.609] ShowWindow (hWnd=0x3031e, nCmdShow=8) returned 0 [0062.609] SendMessageW (hWnd=0x3031e, Msg=0x405, wParam=0x0, lParam=0x0) returned 0x0 [0062.609] GetDlgItem (hDlg=0x3031e, nIDDlgItem=1004) returned 0x20326 [0062.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x405672, lpParameter=0x20326, dwCreationFlags=0x0, lpThreadId=0x18f590 | out: lpThreadId=0x18f590*=0xfb0) returned 0x1a8 [0062.610] CloseHandle (hObject=0x1a8) returned 1 [0062.610] ShowWindow (hWnd=0x80062, nCmdShow=10) returned 0 [0062.627] GetWindowLongW (hWnd=0x80062, nIndex=-21) returned 0 [0062.627] SetWindowPos (hWnd=0x0, hWndInsertAfter=0x80062, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 0 [0062.631] GetWindowLongW (hWnd=0x80062, nIndex=-21) returned 0 [0062.637] GetWindowLongW (hWnd=0x80062, nIndex=-21) returned 0 [0062.647] GetWindowLongW (hWnd=0x80062, nIndex=-21) returned 0 [0062.648] GetWindowLongW (hWnd=0x80052, nIndex=-21) returned 0 [0062.665] GetWindowLongW (hWnd=0x80062, nIndex=-21) returned 0 [0062.666] GetWindowLongW (hWnd=0x40066, nIndex=-21) returned 0 [0062.680] GetWindowLongW (hWnd=0x2032a, nIndex=-21) returned 0 [0062.681] GetWindowLongW (hWnd=0x3031e, nIndex=-21) returned 0 [0062.683] GetWindowLongW (hWnd=0x40068, nIndex=-21) returned 0 [0062.689] GetWindowLongW (hWnd=0x3031e, nIndex=-21) returned 0 [0062.690] GetWindowLongW (hWnd=0x3031e, nIndex=-21) returned 0 [0062.697] GetWindowLongW (hWnd=0x20328, nIndex=-21) returned 0 [0062.705] GetWindowLongW (hWnd=0x3031e, nIndex=-21) returned 0 [0062.710] GetWindowLongW (hWnd=0x3031e, nIndex=-21) returned 0 [0062.715] GetWindowLongW (hWnd=0x3031e, nIndex=-21) returned 0 [0062.715] GetWindowLongW (hWnd=0x30318, nIndex=-21) returned 0 [0062.720] GetWindowLongW (hWnd=0x3031e, nIndex=-21) returned 0 [0062.721] GetWindowLongW (hWnd=0x3031e, nIndex=-21) returned 0 [0062.721] GetWindowLongW (hWnd=0x30318, nIndex=-21) returned 0 [0062.722] GetWindowLongW (hWnd=0x3031e, nIndex=-21) returned 0 [0062.723] GetWindowLongW (hWnd=0x30318, nIndex=-21) returned 0 [0062.727] GetWindowLongW (hWnd=0x3031e, nIndex=-21) returned 0 [0062.737] GetWindowLongW (hWnd=0x3031e, nIndex=-21) returned 0 [0062.762] GetWindowLongW (hWnd=0x3031e, nIndex=-21) returned 0 [0062.765] GetWindowLongW (hWnd=0x3031e, nIndex=-21) returned 0 [0062.775] GetWindowLongW (hWnd=0x3031e, nIndex=-21) returned 0 [0062.775] GetWindowLongW (hWnd=0x30318, nIndex=-21) returned 0 [0062.780] SetWindowPos (hWnd=0x0, hWndInsertAfter=0x80062, X=0, Y=0, cx=0, cy=0, uFlags=0x13) returned 0 Thread: id = 2 os_tid = 0xfa8 Thread: id = 3 os_tid = 0xfac Thread: id = 4 os_tid = 0xfb0 [0062.645] OleInitialize (pvReserved=0x0) returned 0x0 [0062.646] SendMessageW (hWnd=0x3031e, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0062.664] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%TMP%", iMaxLength=1024 | out: lpString1="%TMP%") returned="%TMP%" [0062.664] ExpandEnvironmentStringsW (in: lpSrc="%TMP%", lpDst=0x459000, nSize=0x400 | out: lpDst="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp") returned 0x25 [0062.664] lstrcmpW (lpString1="%TMP%", lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp") returned -1 [0062.664] MulDiv (nNumber=1, nNumerator=30000, nDenominator=93) returned 323 [0062.664] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x143, lParam=0x0) returned 0x0 [0062.667] SHGetFolderPathW (in: hwnd=0x80062, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Local") returned 0x0 [0062.678] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Local") returned 32 [0062.678] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\AppData\\Local\\Jargoneer.Ass", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\AppData\\Local\\Jargoneer.Ass") returned="C:\\Users\\kEecfMwgj\\AppData\\Local\\Jargoneer.Ass" [0062.678] SetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Jargoneer.Ass", dwFileAttributes=0x100) returned 0 [0062.678] MulDiv (nNumber=2, nNumerator=30000, nDenominator=93) returned 645 [0062.679] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x285, lParam=0x0) returned 0x143 [0062.682] wsprintfW (in: param_1=0x455800, param_2="%d" | out: param_1="-1") returned 2 [0062.682] MulDiv (nNumber=3, nNumerator=30000, nDenominator=93) returned 968 [0062.682] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x3c8, lParam=0x0) returned 0x285 [0062.688] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%WINDIR%", iMaxLength=1024 | out: lpString1="%WINDIR%") returned="%WINDIR%" [0062.688] ExpandEnvironmentStringsW (in: lpSrc="%WINDIR%", lpDst=0x458800, nSize=0x400 | out: lpDst="C:\\Windows") returned 0xb [0062.688] lstrcmpW (lpString1="%WINDIR%", lpString2="C:\\Windows") returned -1 [0062.688] MulDiv (nNumber=4, nNumerator=30000, nDenominator=93) returned 1290 [0062.688] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x50a, lParam=0x0) returned 0x3c8 [0062.689] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.689] lstrlenW (lpString="") returned 0 [0062.689] ShowWindow (hWnd=0x0, nCmdShow=5) returned 0 [0062.689] MulDiv (nNumber=5, nNumerator=30000, nDenominator=93) returned 1613 [0062.689] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x64d, lParam=0x0) returned 0x50a [0062.691] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.691] lstrlenW (lpString="") returned 0 [0062.691] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0062.691] lstrlenW (lpString="524386") returned 6 [0062.691] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0062.691] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.691] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0062.691] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0062.692] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0062.692] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0062.692] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1b8, lpdwDisposition=0x0) returned 0x0 [0062.694] RegSetValueExW (in: hKey=0x1b8, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0062.694] RegCloseKey (hKey=0x1b8) returned 0x0 [0062.694] SHGetFolderPathW (in: hwnd=0x80062, csidl=53, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Music") returned 0x0 [0062.696] lstrlenW (lpString="C:\\Users\\Public\\Music") returned 21 [0062.696] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\Public\\Music\\Ungambolling\\Vrelsesanvisningers.Ste", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Music\\Ungambolling\\Vrelsesanvisningers.Ste") returned="C:\\Users\\Public\\Music\\Ungambolling\\Vrelsesanvisningers.Ste" [0062.696] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Ungambolling\\Vrelsesanvisningers.Ste", dwFileAttributes=0x80) returned 0 [0062.697] MulDiv (nNumber=6, nNumerator=30000, nDenominator=93) returned 1935 [0062.697] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x78f, lParam=0x0) returned 0x64d [0062.697] lstrcpynW (in: lpString1=0x40a5f0, lpString2="Martinets", iMaxLength=1024 | out: lpString1="Martinets") returned="Martinets" [0062.698] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Feticherne75\\Kreativiteternes\\Lanoline114", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Feticherne75\\Kreativiteternes\\Lanoline114") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Feticherne75\\Kreativiteternes\\Lanoline114" [0062.698] RegCreateKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Feticherne75\\Kreativiteternes\\Lanoline114", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2, lpSecurityAttributes=0x0, phkResult=0x2dffc7c, lpdwDisposition=0x0 | out: phkResult=0x2dffc7c*=0x1bc, lpdwDisposition=0x0) returned 0x0 [0062.699] RegSetValueExW (in: hKey=0x1bc, lpValueName="Martinets", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x1, cbData=0x4 | out: lpData=0x40b5f0*=0x1) returned 0x0 [0062.700] RegCloseKey (hKey=0x1bc) returned 0x0 [0062.700] MulDiv (nNumber=7, nNumerator=30000, nDenominator=93) returned 2258 [0062.700] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x8d2, lParam=0x0) returned 0x78f [0062.702] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0062.703] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0062.703] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\underbelysningers.Ame121", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\underbelysningers.Ame121") returned="C:\\Windows\\Fonts\\underbelysningers.Ame121" [0062.704] SetFileAttributesW (lpFileName="C:\\Windows\\Fonts\\underbelysningers.Ame121", dwFileAttributes=0x1) returned 0 [0062.704] MulDiv (nNumber=8, nNumerator=30000, nDenominator=93) returned 2581 [0062.704] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0xa15, lParam=0x0) returned 0x8d2 [0062.705] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0062.705] lstrlenW (lpString="524386") returned 6 [0062.705] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0062.705] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.706] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0062.706] wsprintfW (in: param_1=0x44e000, param_2="%d" | out: param_1="197406") returned 6 [0062.706] MulDiv (nNumber=9, nNumerator=30000, nDenominator=93) returned 2903 [0062.706] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0xb57, lParam=0x0) returned 0xa15 [0062.706] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\tyknende\\", iMaxLength=1024 | out: lpString1="Software\\tyknende\\") returned="Software\\tyknende\\" [0062.706] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\tyknende\\", ulOptions=0x0, samDesired=0x20019, phkResult=0x2dffc7c | out: phkResult=0x2dffc7c*=0x0) returned 0x2 [0062.706] MulDiv (nNumber=10, nNumerator=30000, nDenominator=93) returned 3226 [0062.706] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0xc9a, lParam=0x0) returned 0xb57 [0062.707] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\" [0062.707] lstrlenW (lpString="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp") returned 36 [0062.707] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp" [0062.707] GetTickCount () returned 0x206c54b [0062.707] GetTempFileNameW (in: lpPathName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp", lpPrefixString="nsj", uUnique=0x0, lpTempFileName=0x457000 | out: lpTempFileName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nsjC54C.tmp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\nsjc54c.tmp")) returned 0xc54c [0062.708] MulDiv (nNumber=11, nNumerator=30000, nDenominator=93) returned 3548 [0062.708] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0xddc, lParam=0x0) returned 0xc9a [0062.709] ShowWindow (hWnd=0x30318, nCmdShow=8) returned 0 [0062.710] ShowWindow (hWnd=0x2031a, nCmdShow=0) returned 1 [0062.718] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0062.719] lstrlenW (lpString="C:\\ProgramData") returned 14 [0062.719] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0062.719] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0062.719] lstrlenW (lpString="Execute: ") returned 9 [0062.719] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0062.719] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0062.719] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0 [0062.720] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x0 [0062.723] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x0, lParam=0x0) returned 0x1 [0062.724] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0062.725] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.725] lstrlenW (lpString="") returned 0 [0062.725] ShowWindow (hWnd=0x0, nCmdShow=5) returned 0 [0062.725] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%TEMP%", iMaxLength=1024 | out: lpString1="%TEMP%") returned="%TEMP%" [0062.725] ExpandEnvironmentStringsW (in: lpSrc="%TEMP%", lpDst=0x467800, nSize=0x400 | out: lpDst="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp") returned 0x25 [0062.725] lstrcmpW (lpString1="%TEMP%", lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp") returned -1 [0062.725] lstrcpynW (in: lpString1=0x42c248, lpString2="Tiltningerne", iMaxLength=1024 | out: lpString1="Tiltningerne") returned="Tiltningerne" [0062.725] lstrlenW (lpString="Tiltningerne") returned 12 [0062.725] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x1 [0062.726] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x1 [0062.726] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x1, lParam=0x0) returned 0x1 [0062.726] lstrcpynW (in: lpString1=0x331464, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0062.726] MulDiv (nNumber=12, nNumerator=30000, nDenominator=93) returned 3871 [0062.726] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0xf1f, lParam=0x0) returned 0xddc [0062.726] MulDiv (nNumber=13, nNumerator=30000, nDenominator=93) returned 4194 [0062.726] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x1062, lParam=0x0) returned 0xf1f [0062.728] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.728] lstrlenW (lpString="") returned 0 [0062.728] lstrcpynW (in: lpString1=0x33aa44, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.728] MulDiv (nNumber=14, nNumerator=30000, nDenominator=93) returned 4516 [0062.728] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x11a4, lParam=0x0) returned 0x1062 [0062.728] MulDiv (nNumber=15, nNumerator=30000, nDenominator=93) returned 4839 [0062.728] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x12e7, lParam=0x0) returned 0x11a4 [0062.729] MulDiv (nNumber=16, nNumerator=30000, nDenominator=93) returned 5161 [0062.729] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x1429, lParam=0x0) returned 0x12e7 [0062.729] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.729] lstrlenW (lpString="") returned 0 [0062.729] MulDiv (nNumber=18, nNumerator=30000, nDenominator=93) returned 5806 [0062.729] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x16ae, lParam=0x0) returned 0x1429 [0062.729] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.729] lstrlenW (lpString="") returned 0 [0062.729] IsWindow (hWnd=0x0) returned 0 [0062.729] MulDiv (nNumber=20, nNumerator=30000, nDenominator=93) returned 6452 [0062.729] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x1934, lParam=0x0) returned 0x16ae [0062.730] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\" [0062.730] lstrlenW (lpString="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp") returned 36 [0062.730] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp" [0062.730] GetTickCount () returned 0x206c55b [0062.730] GetTempFileNameW (in: lpPathName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp", lpPrefixString="nsz", uUnique=0x0, lpTempFileName=0x466800 | out: lpTempFileName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC55D.tmp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\nszc55d.tmp")) returned 0xc55d [0062.731] SHGetFolderPathW (in: hwnd=0x80062, csidl=45, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\ProgramData\\Microsoft\\Windows\\Templates") returned 0x0 [0062.734] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Windows\\Templates") returned 42 [0062.734] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\ProgramData\\Microsoft\\Windows\\Templates\\Desmitis.Met", iMaxLength=1024 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows\\Templates\\Desmitis.Met") returned="C:\\ProgramData\\Microsoft\\Windows\\Templates\\Desmitis.Met" [0062.734] SHGetFolderPathW (in: hwnd=0x80062, csidl=53, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Music") returned 0x0 [0062.734] lstrlenW (lpString="C:\\Users\\Public\\Music") returned 21 [0062.734] lstrcpynW (in: lpString1=0x40b5f0, lpString2="C:\\Users\\Public\\Music\\Dissent.Att", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Music\\Dissent.Att") returned="C:\\Users\\Public\\Music\\Dissent.Att" [0062.734] SHGetFolderPathW (in: hwnd=0x80062, csidl=45, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\ProgramData\\Microsoft\\Windows\\Templates") returned 0x0 [0062.735] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Windows\\Templates") returned 42 [0062.735] SHGetFolderPathW (in: hwnd=0x80062, csidl=53, hToken=0x0, dwFlags=0x0, pszPath=0x432f12 | out: pszPath="C:\\Users\\Public\\Music") returned 0x0 [0062.735] lstrlenW (lpString="C:\\Users\\Public\\Music") returned 21 [0062.735] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\ProgramData\\Microsoft\\Windows\\Templates\\Desmitis.Met->C:\\Users\\Public\\Music\\Dissent.Att", iMaxLength=1024 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows\\Templates\\Desmitis.Met->C:\\Users\\Public\\Music\\Dissent.Att") returned="C:\\ProgramData\\Microsoft\\Windows\\Templates\\Desmitis.Met->C:\\Users\\Public\\Music\\Dissent.Att" [0062.735] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Templates\\Desmitis.Met" (normalized: "c:\\programdata\\microsoft\\windows\\templates\\desmitis.met"), lpNewFileName="C:\\Users\\Public\\Music\\Dissent.Att" (normalized: "c:\\users\\public\\music\\dissent.att")) returned 0 [0062.735] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.735] lstrlenW (lpString="") returned 0 [0062.735] wsprintfW (in: param_1=0x45d800, param_2="%d" | out: param_1="0") returned 1 [0062.735] MulDiv (nNumber=21, nNumerator=30000, nDenominator=93) returned 6774 [0062.735] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x1a76, lParam=0x0) returned 0x1934 [0062.736] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.736] lstrlenW (lpString="") returned 0 [0062.736] lstrcpynW (in: lpString1=0x40b5f0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.736] lstrcpynW (in: lpString1=0x40bdf0, lpString2="Kalpaks", iMaxLength=1024 | out: lpString1="Kalpaks") returned="Kalpaks" [0062.736] lstrcmpW (lpString1="", lpString2="Kalpaks") returned -1 [0062.736] MulDiv (nNumber=23, nNumerator=30000, nDenominator=93) returned 7419 [0062.736] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x1cfb, lParam=0x0) returned 0x1a76 [0062.737] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0062.737] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x456000, lpFilePart=0x2dfff70 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x2dfff70*="kEecfMwgj") returned 0x12 [0062.738] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x791634f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xf29f86d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf29f86d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kEecfMwgj", cAlternateFileName="KEECFM~1")) returned 0x33a7f0 [0062.738] FindClose (in: hFindFile=0x33a7f0 | out: hFindFile=0x33a7f0) returned 1 [0062.738] lstrcpynW (in: lpString1=0x456012, lpString2="kEecfMwgj", iMaxLength=1024 | out: lpString1="kEecfMwgj") returned="kEecfMwgj" [0062.738] MulDiv (nNumber=24, nNumerator=30000, nDenominator=93) returned 7742 [0062.738] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x1e3e, lParam=0x0) returned 0x1cfb [0062.738] MulDiv (nNumber=25, nNumerator=30000, nDenominator=93) returned 8065 [0062.738] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x1f81, lParam=0x0) returned 0x1e3e [0062.738] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.738] lstrlenW (lpString="") returned 0 [0062.738] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0062.739] lstrlenW (lpString="524386") returned 6 [0062.739] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0062.739] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.739] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0062.739] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0062.739] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0062.739] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0062.739] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1b4, lpdwDisposition=0x0) returned 0x0 [0062.739] RegSetValueExW (in: hKey=0x1b4, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0062.739] RegCloseKey (hKey=0x1b4) returned 0x0 [0062.739] lstrcpynW (in: lpString1=0x45f000, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.740] SHGetFolderPathW (in: hwnd=0x80062, csidl=53, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Music") returned 0x0 [0062.740] lstrlenW (lpString="C:\\Users\\Public\\Music") returned 21 [0062.740] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\Public\\Music\\Ungambolling\\Vrelsesanvisningers.Ste", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Music\\Ungambolling\\Vrelsesanvisningers.Ste") returned="C:\\Users\\Public\\Music\\Ungambolling\\Vrelsesanvisningers.Ste" [0062.740] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Ungambolling\\Vrelsesanvisningers.Ste", dwFileAttributes=0x80) returned 0 [0062.740] MulDiv (nNumber=26, nNumerator=30000, nDenominator=93) returned 8387 [0062.741] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x20c3, lParam=0x0) returned 0x1f81 [0062.741] MulDiv (nNumber=27, nNumerator=30000, nDenominator=93) returned 8710 [0062.741] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x2206, lParam=0x0) returned 0x20c3 [0062.741] GetDC (hWnd=0x80062) returned 0x2010993 [0062.741] GetDeviceCaps (hdc=0x2010993, index=90) returned 96 [0062.741] MulDiv (nNumber=7488, nNumerator=96, nDenominator=72) returned 9984 [0062.741] ReleaseDC (hWnd=0x80062, hDC=0x2010993) returned 1 [0062.741] lstrcpynW (in: lpString1=0x40ce0c, lpString2="Tahoma", iMaxLength=1024 | out: lpString1="Tahoma") returned="Tahoma" [0062.741] CreateFontIndirectW (lplf=0x40cdf0) returned 0x110a0b65 [0062.741] wsprintfW (in: param_1=0x44f000, param_2="%d" | out: param_1="285870949") returned 9 [0062.741] MulDiv (nNumber=28, nNumerator=30000, nDenominator=93) returned 9032 [0062.741] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x2348, lParam=0x0) returned 0x2206 [0062.742] ShowWindow (hWnd=0x30318, nCmdShow=8) returned 1 [0062.742] ShowWindow (hWnd=0x2031a, nCmdShow=0) returned 0 [0062.742] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0062.742] lstrlenW (lpString="C:\\ProgramData") returned 14 [0062.742] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0062.742] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0062.742] lstrlenW (lpString="Execute: ") returned 9 [0062.742] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0062.742] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0062.743] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x2 [0062.743] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x2 [0062.743] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x2, lParam=0x0) returned 0x1 [0062.743] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0062.743] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.743] lstrlenW (lpString="") returned 0 [0062.743] ShowWindow (hWnd=0x0, nCmdShow=5) returned 0 [0062.743] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%TEMP%", iMaxLength=1024 | out: lpString1="%TEMP%") returned="%TEMP%" [0062.743] ExpandEnvironmentStringsW (in: lpSrc="%TEMP%", lpDst=0x467800, nSize=0x400 | out: lpDst="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp") returned 0x25 [0062.744] lstrcmpW (lpString1="%TEMP%", lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp") returned -1 [0062.744] lstrcpynW (in: lpString1=0x42c248, lpString2="Tiltningerne", iMaxLength=1024 | out: lpString1="Tiltningerne") returned="Tiltningerne" [0062.744] lstrlenW (lpString="Tiltningerne") returned 12 [0062.744] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x3 [0062.744] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x3 [0062.744] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x3, lParam=0x0) returned 0x1 [0062.744] lstrcpynW (in: lpString1=0x331464, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0062.744] MulDiv (nNumber=29, nNumerator=30000, nDenominator=93) returned 9355 [0062.744] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x248b, lParam=0x0) returned 0x2348 [0062.745] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.745] lstrlenW (lpString="") returned 0 [0062.745] MulDiv (nNumber=30, nNumerator=30000, nDenominator=93) returned 9677 [0062.745] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x25cd, lParam=0x0) returned 0x248b [0062.745] MulDiv (nNumber=31, nNumerator=30000, nDenominator=93) returned 10000 [0062.745] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x2710, lParam=0x0) returned 0x25cd [0062.745] wsprintfW (in: param_1=0x456800, param_2="%d" | out: param_1="0") returned 1 [0062.745] MulDiv (nNumber=32, nNumerator=30000, nDenominator=93) returned 10323 [0062.745] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x2853, lParam=0x0) returned 0x2710 [0062.745] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%WINDIR%", iMaxLength=1024 | out: lpString1="%WINDIR%") returned="%WINDIR%" [0062.745] ExpandEnvironmentStringsW (in: lpSrc="%WINDIR%", lpDst=0x450800, nSize=0x400 | out: lpDst="C:\\Windows") returned 0xb [0062.745] MulDiv (nNumber=33, nNumerator=30000, nDenominator=93) returned 10645 [0062.746] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x2995, lParam=0x0) returned 0x2853 [0062.746] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.746] lstrlenW (lpString="") returned 0 [0062.746] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0062.746] lstrlenW (lpString="524386") returned 6 [0062.746] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0062.746] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.746] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0062.746] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0062.746] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0062.746] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0062.746] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1b4, lpdwDisposition=0x0) returned 0x0 [0062.746] RegSetValueExW (in: hKey=0x1b4, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0062.747] RegCloseKey (hKey=0x1b4) returned 0x0 [0062.747] SHGetFolderPathW (in: hwnd=0x80062, csidl=53, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Music") returned 0x0 [0062.747] lstrlenW (lpString="C:\\Users\\Public\\Music") returned 21 [0062.747] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\Public\\Music\\Ungambolling\\Vrelsesanvisningers.Ste", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Music\\Ungambolling\\Vrelsesanvisningers.Ste") returned="C:\\Users\\Public\\Music\\Ungambolling\\Vrelsesanvisningers.Ste" [0062.747] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Ungambolling\\Vrelsesanvisningers.Ste", dwFileAttributes=0x80) returned 0 [0062.761] MulDiv (nNumber=34, nNumerator=30000, nDenominator=93) returned 10968 [0062.761] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x2ad8, lParam=0x0) returned 0x2995 [0062.762] MulDiv (nNumber=35, nNumerator=30000, nDenominator=93) returned 11290 [0062.762] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x2c1a, lParam=0x0) returned 0x2ad8 [0062.764] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.764] lstrlenW (lpString="") returned 0 [0062.764] lstrcpynW (in: lpString1=0x40b5f0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.764] lstrcpynW (in: lpString1=0x40bdf0, lpString2="Kalpaks", iMaxLength=1024 | out: lpString1="Kalpaks") returned="Kalpaks" [0062.764] lstrcmpW (lpString1="", lpString2="Kalpaks") returned -1 [0062.764] MulDiv (nNumber=37, nNumerator=30000, nDenominator=93) returned 11935 [0062.764] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x2e9f, lParam=0x0) returned 0x2c1a [0062.766] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0062.766] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x452000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0062.766] MulDiv (nNumber=38, nNumerator=30000, nDenominator=93) returned 12258 [0062.766] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x2fe2, lParam=0x0) returned 0x2e9f [0062.766] ShowWindow (hWnd=0x30318, nCmdShow=8) returned 1 [0062.767] ShowWindow (hWnd=0x2031a, nCmdShow=0) returned 0 [0062.767] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0062.767] lstrlenW (lpString="C:\\ProgramData") returned 14 [0062.767] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0062.767] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0062.767] lstrlenW (lpString="Execute: ") returned 9 [0062.767] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0062.767] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0062.767] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x4 [0062.767] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x4 [0062.768] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x4, lParam=0x0) returned 0x1 [0062.768] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0062.768] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.768] lstrlenW (lpString="") returned 0 [0062.768] ShowWindow (hWnd=0x0, nCmdShow=5) returned 0 [0062.768] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%TEMP%", iMaxLength=1024 | out: lpString1="%TEMP%") returned="%TEMP%" [0062.768] ExpandEnvironmentStringsW (in: lpSrc="%TEMP%", lpDst=0x467800, nSize=0x400 | out: lpDst="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp") returned 0x25 [0062.768] lstrcmpW (lpString1="%TEMP%", lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp") returned -1 [0062.768] lstrcpynW (in: lpString1=0x42c248, lpString2="Tiltningerne", iMaxLength=1024 | out: lpString1="Tiltningerne") returned="Tiltningerne" [0062.768] lstrlenW (lpString="Tiltningerne") returned 12 [0062.768] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x5 [0062.769] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x5 [0062.769] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x5, lParam=0x0) returned 0x1 [0062.769] lstrcpynW (in: lpString1=0x331464, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0062.769] MulDiv (nNumber=39, nNumerator=30000, nDenominator=93) returned 12581 [0062.769] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x3125, lParam=0x0) returned 0x2fe2 [0062.769] MulDiv (nNumber=40, nNumerator=30000, nDenominator=93) returned 12903 [0062.769] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x3267, lParam=0x0) returned 0x3125 [0062.770] lstrcpynW (in: lpString1=0x40a5f0, lpString2="Baluga", iMaxLength=1024 | out: lpString1="Baluga") returned="Baluga" [0062.770] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Snobberiet", iMaxLength=1024 | out: lpString1="Software\\Snobberiet") returned="Software\\Snobberiet" [0062.770] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Snobberiet", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2, lpSecurityAttributes=0x0, phkResult=0x2dffc7c, lpdwDisposition=0x0 | out: phkResult=0x2dffc7c*=0x1b4, lpdwDisposition=0x0) returned 0x0 [0062.770] lstrcpynW (in: lpString1=0x40b5f0, lpString2="%WINDIR%\\Melassen\\scuttling\\Saarrandens6\\Rabidness.Lys", iMaxLength=1024 | out: lpString1="%WINDIR%\\Melassen\\scuttling\\Saarrandens6\\Rabidness.Lys") returned="%WINDIR%\\Melassen\\scuttling\\Saarrandens6\\Rabidness.Lys" [0062.770] lstrlenW (lpString="%WINDIR%\\Melassen\\scuttling\\Saarrandens6\\Rabidness.Lys") returned 54 [0062.770] RegSetValueExW (in: hKey=0x1b4, lpValueName="Baluga", Reserved=0x0, dwType=0x2, lpData="%WINDIR%\\Melassen\\scuttling\\Saarrandens6\\Rabidness.Lys", cbData=0x6e | out: lpData="%WINDIR%\\Melassen\\scuttling\\Saarrandens6\\Rabidness.Lys") returned 0x0 [0062.771] RegCloseKey (hKey=0x1b4) returned 0x0 [0062.771] MulDiv (nNumber=41, nNumerator=30000, nDenominator=93) returned 13226 [0062.771] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x33aa, lParam=0x0) returned 0x3267 [0062.771] MulDiv (nNumber=42, nNumerator=30000, nDenominator=93) returned 13548 [0062.771] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x34ec, lParam=0x0) returned 0x33aa [0062.772] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%TEMP%", iMaxLength=1024 | out: lpString1="%TEMP%") returned="%TEMP%" [0062.772] ExpandEnvironmentStringsW (in: lpSrc="%TEMP%", lpDst=0x451000, nSize=0x400 | out: lpDst="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp") returned 0x25 [0062.772] MulDiv (nNumber=43, nNumerator=30000, nDenominator=93) returned 13871 [0062.772] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x362f, lParam=0x0) returned 0x34ec [0062.772] MulDiv (nNumber=44, nNumerator=30000, nDenominator=93) returned 14194 [0062.772] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x3772, lParam=0x0) returned 0x362f [0062.772] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0062.772] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x459800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0062.772] lstrcmpW (lpString1="%PROGRAMFILES%", lpString2="C:\\Program Files (x86)") returned -1 [0062.772] MulDiv (nNumber=45, nNumerator=30000, nDenominator=93) returned 14516 [0062.772] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x38b4, lParam=0x0) returned 0x3772 [0062.773] MulDiv (nNumber=46, nNumerator=30000, nDenominator=93) returned 14839 [0062.773] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x39f7, lParam=0x0) returned 0x38b4 [0062.773] lstrcpynW (in: lpString1=0x457800, lpString2="Exaggerated", iMaxLength=1024 | out: lpString1="Exaggerated") returned="Exaggerated" [0062.773] MulDiv (nNumber=47, nNumerator=30000, nDenominator=93) returned 15161 [0062.773] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x3b39, lParam=0x0) returned 0x39f7 [0062.773] MulDiv (nNumber=48, nNumerator=30000, nDenominator=93) returned 15484 [0062.773] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x3c7c, lParam=0x0) returned 0x3b39 [0062.773] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.773] lstrlenW (lpString="") returned 0 [0062.774] MulDiv (nNumber=49, nNumerator=30000, nDenominator=93) returned 15806 [0062.774] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x3dbe, lParam=0x0) returned 0x3c7c [0062.774] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0062.774] lstrlenW (lpString="524386") returned 6 [0062.774] ShowWindow (hWnd=0x80062, nCmdShow=0) returned 1 [0062.781] MulDiv (nNumber=50, nNumerator=30000, nDenominator=93) returned 16129 [0062.781] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x3f01, lParam=0x0) returned 0x3dbe [0062.782] lstrcpynW (in: lpString1=0x40a5f0, lpString2="Baluga", iMaxLength=1024 | out: lpString1="Baluga") returned="Baluga" [0062.782] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Snobberiet", iMaxLength=1024 | out: lpString1="Software\\Snobberiet") returned="Software\\Snobberiet" [0062.782] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Snobberiet", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2, lpSecurityAttributes=0x0, phkResult=0x2dffc7c, lpdwDisposition=0x0 | out: phkResult=0x2dffc7c*=0x1b4, lpdwDisposition=0x0) returned 0x0 [0062.782] lstrcpynW (in: lpString1=0x40b5f0, lpString2="%WINDIR%\\Melassen\\scuttling\\Saarrandens6\\Rabidness.Lys", iMaxLength=1024 | out: lpString1="%WINDIR%\\Melassen\\scuttling\\Saarrandens6\\Rabidness.Lys") returned="%WINDIR%\\Melassen\\scuttling\\Saarrandens6\\Rabidness.Lys" [0062.782] lstrlenW (lpString="%WINDIR%\\Melassen\\scuttling\\Saarrandens6\\Rabidness.Lys") returned 54 [0062.782] RegSetValueExW (in: hKey=0x1b4, lpValueName="Baluga", Reserved=0x0, dwType=0x2, lpData="%WINDIR%\\Melassen\\scuttling\\Saarrandens6\\Rabidness.Lys", cbData=0x6e | out: lpData="%WINDIR%\\Melassen\\scuttling\\Saarrandens6\\Rabidness.Lys") returned 0x0 [0062.782] RegCloseKey (hKey=0x1b4) returned 0x0 [0062.782] MulDiv (nNumber=51, nNumerator=30000, nDenominator=93) returned 16452 [0062.782] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x4044, lParam=0x0) returned 0x3f01 [0062.783] MulDiv (nNumber=52, nNumerator=30000, nDenominator=93) returned 16774 [0062.783] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x4186, lParam=0x0) returned 0x4044 [0062.783] wsprintfW (in: param_1=0x455800, param_2="%d" | out: param_1="-1") returned 2 [0062.783] MulDiv (nNumber=53, nNumerator=30000, nDenominator=93) returned 17097 [0062.783] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x42c9, lParam=0x0) returned 0x4186 [0062.783] MulDiv (nNumber=55, nNumerator=30000, nDenominator=93) returned 17742 [0062.783] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x454e, lParam=0x0) returned 0x42c9 [0062.783] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\" [0062.783] lstrlenW (lpString="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp") returned 36 [0062.784] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp" [0062.784] GetTickCount () returned 0x206c599 [0062.784] GetTempFileNameW (in: lpPathName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp", lpPrefixString="nsj", uUnique=0x0, lpTempFileName=0x466800 | out: lpTempFileName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nsjC59C.tmp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\nsjc59c.tmp")) returned 0xc59c [0062.785] SHGetFolderPathW (in: hwnd=0x80062, csidl=21, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Templates") returned 0x0 [0062.787] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Templates") returned 62 [0062.788] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\Desmitis.Met", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\Desmitis.Met") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\Desmitis.Met" [0062.788] SHGetFolderPathW (in: hwnd=0x80062, csidl=13, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj\\Music") returned 0x0 [0062.789] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Music") returned 24 [0062.789] lstrcpynW (in: lpString1=0x40b5f0, lpString2="C:\\Users\\kEecfMwgj\\Music\\Dissent.Att", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Music\\Dissent.Att") returned="C:\\Users\\kEecfMwgj\\Music\\Dissent.Att" [0062.790] SHGetFolderPathW (in: hwnd=0x80062, csidl=21, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Templates") returned 0x0 [0062.790] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Templates") returned 62 [0062.790] SHGetFolderPathW (in: hwnd=0x80062, csidl=13, hToken=0x0, dwFlags=0x0, pszPath=0x432f3a | out: pszPath="C:\\Users\\kEecfMwgj\\Music") returned 0x0 [0062.790] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Music") returned 24 [0062.790] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\Desmitis.Met->C:\\Users\\kEecfMwgj\\Music\\Dissent.Att", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\Desmitis.Met->C:\\Users\\kEecfMwgj\\Music\\Dissent.Att") returned="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\Desmitis.Met->C:\\Users\\kEecfMwgj\\Music\\Dissent.Att" [0062.790] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\Desmitis.Met" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\windows\\templates\\desmitis.met"), lpNewFileName="C:\\Users\\kEecfMwgj\\Music\\Dissent.Att" (normalized: "c:\\users\\keecfmwgj\\music\\dissent.att")) returned 0 [0062.790] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.790] lstrlenW (lpString="") returned 0 [0062.790] wsprintfW (in: param_1=0x45d800, param_2="%d" | out: param_1="0") returned 1 [0062.790] MulDiv (nNumber=56, nNumerator=30000, nDenominator=93) returned 18065 [0062.790] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x4691, lParam=0x0) returned 0x454e [0062.790] lstrcpynW (in: lpString1=0x40a5f0, lpString2="Skrkpropagandaens67", iMaxLength=1024 | out: lpString1="Skrkpropagandaens67") returned="Skrkpropagandaens67" [0062.790] lstrcpynW (in: lpString1=0x40adf0, lpString2="HAEMATINUM", iMaxLength=1024 | out: lpString1="HAEMATINUM") returned="HAEMATINUM" [0062.791] SHGetFolderPathW (in: hwnd=0x80062, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj\\Documents") returned 0x0 [0062.792] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Documents") returned 28 [0062.792] lstrcpynW (in: lpString1=0x40b5f0, lpString2="C:\\Users\\kEecfMwgj\\Documents\\Rikochetteret\\Bladesmith\\sydslesvisk\\Statslaans.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Documents\\Rikochetteret\\Bladesmith\\sydslesvisk\\Statslaans.ini") returned="C:\\Users\\kEecfMwgj\\Documents\\Rikochetteret\\Bladesmith\\sydslesvisk\\Statslaans.ini" [0062.792] GetPrivateProfileStringW (in: lpAppName="Skrkpropagandaens67", lpKeyName="HAEMATINUM", lpDefault="\n", lpReturnedString=0x45a000, nSize=0x3ff, lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Rikochetteret\\Bladesmith\\sydslesvisk\\Statslaans.ini" | out: lpReturnedString="\n") returned 0x1 [0062.793] MulDiv (nNumber=57, nNumerator=30000, nDenominator=93) returned 18387 [0062.793] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x47d3, lParam=0x0) returned 0x4691 [0062.793] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.793] lstrlenW (lpString="") returned 0 [0062.793] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0062.793] lstrlenW (lpString="524386") returned 6 [0062.793] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0062.793] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.794] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0062.794] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0062.794] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0062.794] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0062.794] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c8, lpdwDisposition=0x0) returned 0x0 [0062.795] RegSetValueExW (in: hKey=0x1c8, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0062.795] RegCloseKey (hKey=0x1c8) returned 0x0 [0062.795] SHGetFolderPathW (in: hwnd=0x80062, csidl=53, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Music") returned 0x0 [0062.795] lstrlenW (lpString="C:\\Users\\Public\\Music") returned 21 [0062.795] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\Public\\Music\\Ungambolling\\Vrelsesanvisningers.Ste", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Music\\Ungambolling\\Vrelsesanvisningers.Ste") returned="C:\\Users\\Public\\Music\\Ungambolling\\Vrelsesanvisningers.Ste" [0062.795] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Ungambolling\\Vrelsesanvisningers.Ste", dwFileAttributes=0x80) returned 0 [0062.795] MulDiv (nNumber=58, nNumerator=30000, nDenominator=93) returned 18710 [0062.795] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x4916, lParam=0x0) returned 0x47d3 [0062.796] SHGetFolderPathW (in: hwnd=0x80062, csidl=25, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\Users\\Public\\Desktop") returned 0x0 [0062.797] lstrlenW (lpString="C:\\Users\\Public\\Desktop") returned 23 [0062.797] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\Users\\Public\\Desktop\\Gravure\\ARBEJDSLSHEDSPROCENTS\\Skanneren.Des\"", iMaxLength=1024 | out: lpString1="\"C:\\Users\\Public\\Desktop\\Gravure\\ARBEJDSLSHEDSPROCENTS\\Skanneren.Des\"") returned="\"C:\\Users\\Public\\Desktop\\Gravure\\ARBEJDSLSHEDSPROCENTS\\Skanneren.Des\"" [0062.797] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0062.797] lstrlenW (lpString="Execute: ") returned 9 [0062.797] lstrlenW (lpString="\"C:\\Users\\Public\\Desktop\\Gravure\\ARBEJDSLSHEDSPROCENTS\\Skanneren.Des\"") returned 69 [0062.797] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\Users\\Public\\Desktop\\Gravure\\ARBEJDSLSHEDSPROCENTS\\Skanneren.Des\"" | out: lpString1="Execute: \"C:\\Users\\Public\\Desktop\\Gravure\\ARBEJDSLSHEDSPROCENTS\\Skanneren.Des\"") returned="Execute: \"C:\\Users\\Public\\Desktop\\Gravure\\ARBEJDSLSHEDSPROCENTS\\Skanneren.Des\"" [0062.797] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\Users\\Public\\Desktop\\Gravure\\ARBEJDSLSHEDSPROCENTS\\Skanneren.Des\"") returned 1 [0062.798] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x6 [0062.798] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dffc40) returned 0x6 [0062.798] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x6, lParam=0x0) returned 0x1 [0062.798] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\Users\\Public\\Desktop\\Gravure\\ARBEJDSLSHEDSPROCENTS\\Skanneren.Des\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dffc64 | out: lpCommandLine="\"C:\\Users\\Public\\Desktop\\Gravure\\ARBEJDSLSHEDSPROCENTS\\Skanneren.Des\"", lpProcessInformation=0x2dffc64*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0062.799] MulDiv (nNumber=59, nNumerator=30000, nDenominator=93) returned 19032 [0062.799] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x4a58, lParam=0x0) returned 0x4916 [0062.799] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0062.799] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x452000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0062.799] MulDiv (nNumber=60, nNumerator=30000, nDenominator=93) returned 19355 [0062.799] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x4b9b, lParam=0x0) returned 0x4a58 [0062.799] MulDiv (nNumber=63, nNumerator=30000, nDenominator=93) returned 20323 [0062.799] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x4f63, lParam=0x0) returned 0x4b9b [0062.799] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.799] lstrlenW (lpString="") returned 0 [0062.800] lstrcpynW (in: lpString1=0x40b5f0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.800] lstrcpynW (in: lpString1=0x40bdf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.800] lstrcmpiW (lpString1="", lpString2="") returned 0 [0062.800] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.800] lstrlenW (lpString="") returned 0 [0062.800] lstrcpynW (in: lpString1=0x33ae14, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.800] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\" [0062.800] lstrlenW (lpString="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp") returned 36 [0062.800] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp" [0062.800] GetTickCount () returned 0x206c5a9 [0062.800] GetTempFileNameW (in: lpPathName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp", lpPrefixString="nsz", uUnique=0x0, lpTempFileName=0x436000 | out: lpTempFileName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\nszc5ad.tmp")) returned 0xc5ad [0062.801] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0062.801] lstrlenW (lpString="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned 48 [0062.801] lstrcpynW (in: lpString1=0x40a5f0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0062.801] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0062.802] lstrlenW (lpString="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned 48 [0062.802] FindFirstFileW (in: lpFileName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\nszc5ad.tmp"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5ae1860, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xd5ae1860, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xd5ae1860, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nszC5AD.tmp", cAlternateFileName="")) returned 0x33b620 [0062.802] FindClose (in: hFindFile=0x33b620 | out: hFindFile=0x33b620) returned 1 [0062.802] DeleteFileW (lpFileName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\nszc5ad.tmp")) returned 1 [0062.802] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0062.802] lstrlenW (lpString="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned 48 [0062.802] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0062.802] CreateDirectoryW (lpPathName="C:\\Users" (normalized: "c:\\users"), lpSecurityAttributes=0x0) returned 0 [0062.803] GetLastError () returned 0xb7 [0062.803] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0062.803] CreateDirectoryW (lpPathName="C:\\Users\\KEECFM~1" (normalized: "c:\\users\\keecfmwgj"), lpSecurityAttributes=0x0) returned 0 [0062.803] GetLastError () returned 0xb7 [0062.803] GetFileAttributesW (lpFileName="C:\\Users\\KEECFM~1" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0062.803] CreateDirectoryW (lpPathName="C:\\Users\\KEECFM~1\\AppData" (normalized: "c:\\users\\keecfmwgj\\appdata"), lpSecurityAttributes=0x0) returned 0 [0062.803] GetLastError () returned 0xb7 [0062.803] GetFileAttributesW (lpFileName="C:\\Users\\KEECFM~1\\AppData" (normalized: "c:\\users\\keecfmwgj\\appdata")) returned 0x2012 [0062.803] CreateDirectoryW (lpPathName="C:\\Users\\KEECFM~1\\AppData\\Local" (normalized: "c:\\users\\keecfmwgj\\appdata\\local"), lpSecurityAttributes=0x0) returned 0 [0062.803] GetLastError () returned 0xb7 [0062.803] GetFileAttributesW (lpFileName="C:\\Users\\KEECFM~1\\AppData\\Local" (normalized: "c:\\users\\keecfmwgj\\appdata\\local")) returned 0x2010 [0062.804] CreateDirectoryW (lpPathName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp"), lpSecurityAttributes=0x0) returned 0 [0062.804] GetLastError () returned 0xb7 [0062.804] GetFileAttributesW (lpFileName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp")) returned 0x2010 [0062.804] IsUserAnAdmin () returned 1 [0062.804] CreateDirectoryW (lpPathName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\nszc5ad.tmp"), lpSecurityAttributes=0x2dff964) returned 1 [0062.805] lstrcpynW (in: lpString1=0x42c248, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.805] lstrlenW (lpString="") returned 0 [0062.805] lstrlenW (lpString="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned 48 [0062.805] lstrcatW (in: lpString1="", lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0062.805] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0062.805] lstrlenW (lpString="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned 48 [0062.805] lstrcpynW (in: lpString1=0x40a5f0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0062.805] lstrlenW (lpString="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned 48 [0062.806] lstrcpynW (in: lpString1=0x443000, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0062.806] lstrcpynW (in: lpString1=0x436000, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.806] MulDiv (nNumber=64, nNumerator=30000, nDenominator=93) returned 20645 [0062.806] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x50a5, lParam=0x0) returned 0x4f63 [0062.806] MulDiv (nNumber=65, nNumerator=30000, nDenominator=93) returned 20968 [0062.806] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x51e8, lParam=0x0) returned 0x50a5 [0062.807] ShowWindow (hWnd=0x30318, nCmdShow=8) returned 1 [0062.807] ShowWindow (hWnd=0x2031a, nCmdShow=0) returned 0 [0062.807] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0062.807] lstrlenW (lpString="C:\\ProgramData") returned 14 [0062.807] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0062.807] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0062.807] lstrlenW (lpString="Execute: ") returned 9 [0062.807] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0062.807] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0062.807] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x7 [0062.807] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x7 [0062.808] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x7, lParam=0x0) returned 0x1 [0062.808] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0062.808] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0062.808] lstrlenW (lpString="") returned 0 [0062.808] ShowWindow (hWnd=0x0, nCmdShow=5) returned 0 [0062.808] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%TEMP%", iMaxLength=1024 | out: lpString1="%TEMP%") returned="%TEMP%" [0062.808] ExpandEnvironmentStringsW (in: lpSrc="%TEMP%", lpDst=0x467800, nSize=0x400 | out: lpDst="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp") returned 0x25 [0062.808] lstrcmpW (lpString1="%TEMP%", lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp") returned -1 [0062.808] lstrcpynW (in: lpString1=0x42c248, lpString2="Tiltningerne", iMaxLength=1024 | out: lpString1="Tiltningerne") returned="Tiltningerne" [0062.808] lstrlenW (lpString="Tiltningerne") returned 12 [0062.808] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x8 [0062.809] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x8 [0062.809] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x8, lParam=0x0) returned 0x1 [0062.809] lstrcpynW (in: lpString1=0x331464, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0062.809] MulDiv (nNumber=66, nNumerator=30000, nDenominator=93) returned 21290 [0062.809] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x532a, lParam=0x0) returned 0x51e8 [0062.811] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0062.811] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x451800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0062.811] MulDiv (nNumber=67, nNumerator=30000, nDenominator=93) returned 21613 [0062.811] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x546d, lParam=0x0) returned 0x532a [0062.811] Sleep (dwMilliseconds=0x578) [0064.215] MulDiv (nNumber=68, nNumerator=30000, nDenominator=93) returned 21935 [0064.215] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x55af, lParam=0x0) returned 0x546d [0064.215] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0064.215] lstrlenW (lpString="524386") returned 6 [0064.215] ShowWindow (hWnd=0x80062, nCmdShow=0) returned 0 [0064.215] MulDiv (nNumber=69, nNumerator=30000, nDenominator=93) returned 22258 [0064.215] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x56f2, lParam=0x0) returned 0x55af [0064.216] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned" [0064.216] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned") returned 52 [0064.216] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned" [0064.216] CreateDirectoryW (lpPathName="C:\\Users" (normalized: "c:\\users"), lpSecurityAttributes=0x0) returned 0 [0064.216] GetLastError () returned 0xb7 [0064.216] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0064.217] CreateDirectoryW (lpPathName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj"), lpSecurityAttributes=0x0) returned 0 [0064.217] GetLastError () returned 0xb7 [0064.217] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0064.217] CreateDirectoryW (lpPathName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos"), lpSecurityAttributes=0x0) returned 0 [0064.217] GetLastError () returned 0xb7 [0064.217] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos")) returned 0x11 [0064.217] CreateDirectoryW (lpPathName="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne" (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne"), lpSecurityAttributes=0x0) returned 1 [0064.219] CreateDirectoryW (lpPathName="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned" (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned"), lpSecurityAttributes=0x0) returned 1 [0064.219] lstrcpynW (in: lpString1=0x42c248, lpString2="Output folder: ", iMaxLength=1024 | out: lpString1="Output folder: ") returned="Output folder: " [0064.219] lstrlenW (lpString="Output folder: ") returned 15 [0064.219] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned") returned 52 [0064.219] lstrcatW (in: lpString1="Output folder: ", lpString2="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned" | out: lpString1="Output folder: C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned") returned="Output folder: C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned" [0064.219] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x9 [0064.220] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dffc38) returned 0x9 [0064.220] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x9, lParam=0x0) returned 0x1 [0064.224] lstrcpynW (in: lpString1=0x441000, lpString2="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned" [0064.224] SetCurrentDirectoryW (lpPathName="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned" (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned")) returned 1 [0064.224] MulDiv (nNumber=70, nNumerator=30000, nDenominator=93) returned 22581 [0064.224] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x5835, lParam=0x0) returned 0x56f2 [0064.224] Sleep (dwMilliseconds=0x36b0) [0074.229] MulDiv (nNumber=71, nNumerator=30000, nDenominator=93) returned 22903 [0074.229] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x5977, lParam=0x0) returned 0x5835 [0074.230] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned" [0074.230] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned") returned 52 [0074.230] lstrcpynW (in: lpString1=0x40a5f0, lpString2="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\Gestisk.For", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\Gestisk.For") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\Gestisk.For" [0074.230] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\Gestisk.For" (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\gestisk.for"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5ae1860, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xd5ae1860, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xd5ae1860, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nszC5AD.tmp", cAlternateFileName="")) returned 0xffffffff [0074.232] MulDiv (nNumber=72, nNumerator=30000, nDenominator=93) returned 23226 [0074.232] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x5aba, lParam=0x0) returned 0x5977 [0074.232] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned" [0074.232] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned") returned 52 [0074.232] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned" [0074.232] CreateDirectoryW (lpPathName="C:\\Users" (normalized: "c:\\users"), lpSecurityAttributes=0x0) returned 0 [0074.233] GetLastError () returned 0xb7 [0074.233] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0074.233] CreateDirectoryW (lpPathName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj"), lpSecurityAttributes=0x0) returned 0 [0074.233] GetLastError () returned 0xb7 [0074.233] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0074.233] CreateDirectoryW (lpPathName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos"), lpSecurityAttributes=0x0) returned 0 [0074.233] GetLastError () returned 0xb7 [0074.233] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos")) returned 0x11 [0074.234] CreateDirectoryW (lpPathName="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne" (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne"), lpSecurityAttributes=0x0) returned 0 [0074.234] GetLastError () returned 0xb7 [0074.234] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne" (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne")) returned 0x10 [0074.234] CreateDirectoryW (lpPathName="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned" (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned"), lpSecurityAttributes=0x0) returned 0 [0074.234] GetLastError () returned 0xb7 [0074.234] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned" (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned")) returned 0x10 [0074.234] lstrcpynW (in: lpString1=0x42c248, lpString2="Output folder: ", iMaxLength=1024 | out: lpString1="Output folder: ") returned="Output folder: " [0074.234] lstrlenW (lpString="Output folder: ") returned 15 [0074.234] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned") returned 52 [0074.234] lstrcatW (in: lpString1="Output folder: ", lpString2="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned" | out: lpString1="Output folder: C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned") returned="Output folder: C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned" [0074.234] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0xa [0074.235] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dffc38) returned 0xa [0074.235] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0xa, lParam=0x0) returned 0x1 [0074.236] lstrcpynW (in: lpString1=0x441000, lpString2="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned" [0074.236] SetCurrentDirectoryW (lpPathName="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned" (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned")) returned 1 [0074.236] MulDiv (nNumber=73, nNumerator=30000, nDenominator=93) returned 23548 [0074.236] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x5bfc, lParam=0x0) returned 0x5aba [0074.236] lstrcpynW (in: lpString1=0x40bdf0, lpString2="Gestisk.For", iMaxLength=1024 | out: lpString1="Gestisk.For") returned="Gestisk.For" [0074.236] lstrcpynW (in: lpString1=0x40a5f0, lpString2="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned" [0074.236] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned") returned 52 [0074.236] lstrcatW (in: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned", lpString2="\\" | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\" [0074.236] lstrcatW (in: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\", lpString2="Gestisk.For" | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\Gestisk.For") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\Gestisk.For" [0074.236] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\Gestisk.For" (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\gestisk.for")) returned 0xffffffff [0074.236] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\Gestisk.For" (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\gestisk.for")) returned 0xffffffff [0074.237] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\Gestisk.For" (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\gestisk.for"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c [0074.239] lstrcpynW (in: lpString1=0x42c248, lpString2="Extract: ", iMaxLength=1024 | out: lpString1="Extract: ") returned="Extract: " [0074.239] lstrlenW (lpString="Extract: ") returned 9 [0074.239] lstrlenW (lpString="Gestisk.For") returned 11 [0074.239] lstrcatW (in: lpString1="Extract: ", lpString2="Gestisk.For" | out: lpString1="Extract: Gestisk.For") returned="Extract: Gestisk.For" [0074.239] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0xb [0074.239] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dffc40) returned 0xb [0074.240] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0xb, lParam=0x0) returned 0x1 [0074.240] SetFilePointer (in: hFile=0x180, lDistanceToMove=212145, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x33cb1 [0074.240] ReadFile (in: hFile=0x180, lpBuffer=0x2dffc7c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2dffbb8, lpOverlapped=0x0 | out: lpBuffer=0x2dffc7c*, lpNumberOfBytesRead=0x2dffbb8*=0x4, lpOverlapped=0x0) returned 1 [0074.240] GetTickCount () returned 0x20701f4 [0074.240] ReadFile (in: hFile=0x180, lpBuffer=0x41ea20, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x2dffbb8, lpOverlapped=0x0 | out: lpBuffer=0x41ea20*, lpNumberOfBytesRead=0x2dffbb8*=0x4000, lpOverlapped=0x0) returned 1 [0074.242] GetTickCount () returned 0x20701f4 [0074.242] WriteFile (in: hFile=0x1c, lpBuffer=0x422a20*, nNumberOfBytesToWrite=0x4002, lpNumberOfBytesWritten=0x2dffbc4, lpOverlapped=0x0 | out: lpBuffer=0x422a20*, lpNumberOfBytesWritten=0x2dffbc4*=0x4002, lpOverlapped=0x0) returned 1 [0074.244] GetTickCount () returned 0x20701f4 [0074.244] ReadFile (in: hFile=0x180, lpBuffer=0x41ea20, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x2dffbb8, lpOverlapped=0x0 | out: lpBuffer=0x41ea20*, lpNumberOfBytesRead=0x2dffbb8*=0x4000, lpOverlapped=0x0) returned 1 [0074.245] GetTickCount () returned 0x2070203 [0074.245] WriteFile (in: hFile=0x1c, lpBuffer=0x422a20*, nNumberOfBytesToWrite=0x6b4d, lpNumberOfBytesWritten=0x2dffbc4, lpOverlapped=0x0 | out: lpBuffer=0x422a20*, lpNumberOfBytesWritten=0x2dffbc4*=0x6b4d, lpOverlapped=0x0) returned 1 [0074.246] GetTickCount () returned 0x2070203 [0074.246] ReadFile (in: hFile=0x180, lpBuffer=0x41ea20, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x2dffbb8, lpOverlapped=0x0 | out: lpBuffer=0x41ea20*, lpNumberOfBytesRead=0x2dffbb8*=0x4000, lpOverlapped=0x0) returned 1 [0074.246] GetTickCount () returned 0x2070203 [0074.246] WriteFile (in: hFile=0x1c, lpBuffer=0x422a20*, nNumberOfBytesToWrite=0x5e2a, lpNumberOfBytesWritten=0x2dffbc4, lpOverlapped=0x0 | out: lpBuffer=0x422a20*, lpNumberOfBytesWritten=0x2dffbc4*=0x5e2a, lpOverlapped=0x0) returned 1 [0074.247] GetTickCount () returned 0x2070203 [0074.247] ReadFile (in: hFile=0x180, lpBuffer=0x41ea20, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x2dffbb8, lpOverlapped=0x0 | out: lpBuffer=0x41ea20*, lpNumberOfBytesRead=0x2dffbb8*=0x4000, lpOverlapped=0x0) returned 1 [0074.247] GetTickCount () returned 0x2070203 [0074.247] WriteFile (in: hFile=0x1c, lpBuffer=0x422a20*, nNumberOfBytesToWrite=0x67d8, lpNumberOfBytesWritten=0x2dffbc4, lpOverlapped=0x0 | out: lpBuffer=0x422a20*, lpNumberOfBytesWritten=0x2dffbc4*=0x67d8, lpOverlapped=0x0) returned 1 [0074.248] GetTickCount () returned 0x2070203 [0074.248] ReadFile (in: hFile=0x180, lpBuffer=0x41ea20, nNumberOfBytesToRead=0xe6b, lpNumberOfBytesRead=0x2dffbb8, lpOverlapped=0x0 | out: lpBuffer=0x41ea20*, lpNumberOfBytesRead=0x2dffbb8*=0xe6b, lpOverlapped=0x0) returned 1 [0074.249] GetTickCount () returned 0x2070203 [0074.249] MulDiv (nNumber=69227, nNumerator=100, nDenominator=69227) returned 100 [0074.249] wsprintfW (in: param_1=0x2dffbd4, param_2="... %d%%" | out: param_1="... 100%") returned 8 [0074.249] lstrlenW (lpString="Extract: Gestisk.For") returned 20 [0074.249] lstrlenW (lpString="... 100%") returned 8 [0074.249] lstrcatW (in: lpString1="Extract: Gestisk.For", lpString2="... 100%" | out: lpString1="Extract: Gestisk.For... 100%") returned="Extract: Gestisk.For... 100%" [0074.249] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0xc [0074.249] SendMessageW (hWnd=0x2031a, Msg=0x104c, wParam=0x0, lParam=0x2dffb88) returned 0x1 [0074.249] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0xb, lParam=0x0) returned 0x1 [0074.250] WriteFile (in: hFile=0x1c, lpBuffer=0x422a20*, nNumberOfBytesToWrite=0x1905, lpNumberOfBytesWritten=0x2dffbc4, lpOverlapped=0x0 | out: lpBuffer=0x422a20*, lpNumberOfBytesWritten=0x2dffbc4*=0x1905, lpOverlapped=0x0) returned 1 [0074.250] SetFileTime (hFile=0x1c, lpCreationTime=0x2dfff44, lpLastAccessTime=0x0, lpLastWriteTime=0x2dfff44) returned 1 [0074.250] CloseHandle (hObject=0x1c) returned 1 [0074.254] MulDiv (nNumber=74, nNumerator=30000, nDenominator=93) returned 23871 [0074.254] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x5d3f, lParam=0x0) returned 0x5bfc [0074.254] lstrcpynW (in: lpString1=0x40bdf0, lpString2="face-cool-symbolic.svg", iMaxLength=1024 | out: lpString1="face-cool-symbolic.svg") returned="face-cool-symbolic.svg" [0074.254] lstrcpynW (in: lpString1=0x40a5f0, lpString2="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned" [0074.254] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned") returned 52 [0074.254] lstrcatW (in: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned", lpString2="\\" | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\" [0074.254] lstrcatW (in: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\", lpString2="face-cool-symbolic.svg" | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\face-cool-symbolic.svg") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\face-cool-symbolic.svg" [0074.254] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\face-cool-symbolic.svg" (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\face-cool-symbolic.svg")) returned 0xffffffff [0074.254] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\face-cool-symbolic.svg" (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\face-cool-symbolic.svg")) returned 0xffffffff [0074.254] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\face-cool-symbolic.svg" (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\face-cool-symbolic.svg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c [0074.255] lstrcpynW (in: lpString1=0x42c248, lpString2="Extract: ", iMaxLength=1024 | out: lpString1="Extract: ") returned="Extract: " [0074.255] lstrlenW (lpString="Extract: ") returned 9 [0074.255] lstrlenW (lpString="face-cool-symbolic.svg") returned 22 [0074.255] lstrcatW (in: lpString1="Extract: ", lpString2="face-cool-symbolic.svg" | out: lpString1="Extract: face-cool-symbolic.svg") returned="Extract: face-cool-symbolic.svg" [0074.255] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0xc [0074.255] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dffc40) returned 0xc [0074.256] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0xc, lParam=0x0) returned 0x1 [0074.256] SetFilePointer (in: hFile=0x180, lDistanceToMove=281376, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x44b20 [0074.256] ReadFile (in: hFile=0x180, lpBuffer=0x2dffc7c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2dffbb8, lpOverlapped=0x0 | out: lpBuffer=0x2dffc7c*, lpNumberOfBytesRead=0x2dffbb8*=0x4, lpOverlapped=0x0) returned 1 [0074.256] GetTickCount () returned 0x2070203 [0074.256] ReadFile (in: hFile=0x180, lpBuffer=0x41ea20, nNumberOfBytesToRead=0x103, lpNumberOfBytesRead=0x2dffbb8, lpOverlapped=0x0 | out: lpBuffer=0x41ea20*, lpNumberOfBytesRead=0x2dffbb8*=0x103, lpOverlapped=0x0) returned 1 [0074.256] GetTickCount () returned 0x2070203 [0074.256] MulDiv (nNumber=259, nNumerator=100, nDenominator=259) returned 100 [0074.256] wsprintfW (in: param_1=0x2dffbd4, param_2="... %d%%" | out: param_1="... 100%") returned 8 [0074.256] lstrlenW (lpString="Extract: face-cool-symbolic.svg") returned 31 [0074.256] lstrlenW (lpString="... 100%") returned 8 [0074.256] lstrcatW (in: lpString1="Extract: face-cool-symbolic.svg", lpString2="... 100%" | out: lpString1="Extract: face-cool-symbolic.svg... 100%") returned="Extract: face-cool-symbolic.svg... 100%" [0074.256] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0xd [0074.257] SendMessageW (hWnd=0x2031a, Msg=0x104c, wParam=0x0, lParam=0x2dffb88) returned 0x1 [0074.257] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0xc, lParam=0x0) returned 0x1 [0074.257] WriteFile (in: hFile=0x1c, lpBuffer=0x422a20*, nNumberOfBytesToWrite=0x18e, lpNumberOfBytesWritten=0x2dffbc4, lpOverlapped=0x0 | out: lpBuffer=0x422a20*, lpNumberOfBytesWritten=0x2dffbc4*=0x18e, lpOverlapped=0x0) returned 1 [0074.258] SetFileTime (hFile=0x1c, lpCreationTime=0x2dfff44, lpLastAccessTime=0x0, lpLastWriteTime=0x2dfff44) returned 1 [0074.258] CloseHandle (hObject=0x1c) returned 1 [0074.260] MulDiv (nNumber=75, nNumerator=30000, nDenominator=93) returned 24194 [0074.260] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x5e82, lParam=0x0) returned 0x5d3f [0074.260] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned" [0074.260] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned") returned 52 [0074.261] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI\\Ld7", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI\\Ld7") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI\\Ld7" [0074.261] CreateDirectoryW (lpPathName="C:\\Users" (normalized: "c:\\users"), lpSecurityAttributes=0x0) returned 0 [0074.261] GetLastError () returned 0xb7 [0074.261] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0074.261] CreateDirectoryW (lpPathName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj"), lpSecurityAttributes=0x0) returned 0 [0074.261] GetLastError () returned 0xb7 [0074.261] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0074.261] CreateDirectoryW (lpPathName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos"), lpSecurityAttributes=0x0) returned 0 [0074.261] GetLastError () returned 0xb7 [0074.261] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos")) returned 0x11 [0074.261] CreateDirectoryW (lpPathName="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne" (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne"), lpSecurityAttributes=0x0) returned 0 [0074.262] GetLastError () returned 0xb7 [0074.262] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne" (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne")) returned 0x10 [0074.262] CreateDirectoryW (lpPathName="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned" (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned"), lpSecurityAttributes=0x0) returned 0 [0074.262] GetLastError () returned 0xb7 [0074.262] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned" (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned")) returned 0x10 [0074.262] CreateDirectoryW (lpPathName="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI" (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpSecurityAttributes=0x0) returned 1 [0074.263] CreateDirectoryW (lpPathName="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI\\Ld7" (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri\\ld7"), lpSecurityAttributes=0x0) returned 1 [0074.263] lstrcpynW (in: lpString1=0x42c248, lpString2="Output folder: ", iMaxLength=1024 | out: lpString1="Output folder: ") returned="Output folder: " [0074.263] lstrlenW (lpString="Output folder: ") returned 15 [0074.263] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI\\Ld7") returned 63 [0074.263] lstrcatW (in: lpString1="Output folder: ", lpString2="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI\\Ld7" | out: lpString1="Output folder: C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI\\Ld7") returned="Output folder: C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI\\Ld7" [0074.263] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0xd [0074.264] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dffc38) returned 0xd [0074.264] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0xd, lParam=0x0) returned 0x1 [0074.264] lstrcpynW (in: lpString1=0x441000, lpString2="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI\\Ld7", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI\\Ld7") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI\\Ld7" [0074.264] SetCurrentDirectoryW (lpPathName="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI\\Ld7" (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri\\ld7")) returned 1 [0074.265] MulDiv (nNumber=76, nNumerator=30000, nDenominator=93) returned 24516 [0074.265] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x5fc4, lParam=0x0) returned 0x5e82 [0074.265] lstrcpynW (in: lpString1=0x40bdf0, lpString2="elan.DIS", iMaxLength=1024 | out: lpString1="elan.DIS") returned="elan.DIS" [0074.265] lstrcpynW (in: lpString1=0x40a5f0, lpString2="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI\\Ld7", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI\\Ld7") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI\\Ld7" [0074.265] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI\\Ld7") returned 63 [0074.265] lstrcatW (in: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI\\Ld7", lpString2="\\" | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI\\Ld7\\") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI\\Ld7\\" [0074.265] lstrcatW (in: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI\\Ld7\\", lpString2="elan.DIS" | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI\\Ld7\\elan.DIS") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI\\Ld7\\elan.DIS" [0074.265] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI\\Ld7\\elan.DIS" (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri\\ld7\\elan.dis")) returned 0xffffffff [0074.265] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI\\Ld7\\elan.DIS" (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri\\ld7\\elan.dis")) returned 0xffffffff [0074.265] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI\\Ld7\\elan.DIS" (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri\\ld7\\elan.dis"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0074.266] lstrcpynW (in: lpString1=0x42c248, lpString2="Extract: ", iMaxLength=1024 | out: lpString1="Extract: ") returned="Extract: " [0074.266] lstrlenW (lpString="Extract: ") returned 9 [0074.266] lstrlenW (lpString="elan.DIS") returned 8 [0074.266] lstrcatW (in: lpString1="Extract: ", lpString2="elan.DIS" | out: lpString1="Extract: elan.DIS") returned="Extract: elan.DIS" [0074.266] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0xe [0074.266] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dffc40) returned 0xe [0074.266] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0xe, lParam=0x0) returned 0x1 [0074.267] SetFilePointer (in: hFile=0x180, lDistanceToMove=281639, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x44c27 [0074.267] ReadFile (in: hFile=0x180, lpBuffer=0x2dffc7c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2dffbb8, lpOverlapped=0x0 | out: lpBuffer=0x2dffc7c*, lpNumberOfBytesRead=0x2dffbb8*=0x4, lpOverlapped=0x0) returned 1 [0074.267] GetTickCount () returned 0x2070213 [0074.267] ReadFile (in: hFile=0x180, lpBuffer=0x41ea20, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x2dffbb8, lpOverlapped=0x0 | out: lpBuffer=0x41ea20*, lpNumberOfBytesRead=0x2dffbb8*=0x4000, lpOverlapped=0x0) returned 1 [0074.267] GetTickCount () returned 0x2070213 [0074.268] WriteFile (in: hFile=0x1c8, lpBuffer=0x422a20*, nNumberOfBytesToWrite=0x6e68, lpNumberOfBytesWritten=0x2dffbc4, lpOverlapped=0x0 | out: lpBuffer=0x422a20*, lpNumberOfBytesWritten=0x2dffbc4*=0x6e68, lpOverlapped=0x0) returned 1 [0074.269] GetTickCount () returned 0x2070213 [0074.269] ReadFile (in: hFile=0x180, lpBuffer=0x41ea20, nNumberOfBytesToRead=0xeec, lpNumberOfBytesRead=0x2dffbb8, lpOverlapped=0x0 | out: lpBuffer=0x41ea20*, lpNumberOfBytesRead=0x2dffbb8*=0xeec, lpOverlapped=0x0) returned 1 [0074.269] GetTickCount () returned 0x2070213 [0074.270] MulDiv (nNumber=20204, nNumerator=100, nDenominator=20204) returned 100 [0074.270] wsprintfW (in: param_1=0x2dffbd4, param_2="... %d%%" | out: param_1="... 100%") returned 8 [0074.270] lstrlenW (lpString="Extract: elan.DIS") returned 17 [0074.270] lstrlenW (lpString="... 100%") returned 8 [0074.270] lstrcatW (in: lpString1="Extract: elan.DIS", lpString2="... 100%" | out: lpString1="Extract: elan.DIS... 100%") returned="Extract: elan.DIS... 100%" [0074.270] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0xf [0074.270] SendMessageW (hWnd=0x2031a, Msg=0x104c, wParam=0x0, lParam=0x2dffb88) returned 0x1 [0074.270] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0xe, lParam=0x0) returned 0x1 [0074.271] WriteFile (in: hFile=0x1c8, lpBuffer=0x422a20*, nNumberOfBytesToWrite=0x19d6, lpNumberOfBytesWritten=0x2dffbc4, lpOverlapped=0x0 | out: lpBuffer=0x422a20*, lpNumberOfBytesWritten=0x2dffbc4*=0x19d6, lpOverlapped=0x0) returned 1 [0074.271] SetFileTime (hFile=0x1c8, lpCreationTime=0x2dfff44, lpLastAccessTime=0x0, lpLastWriteTime=0x2dfff44) returned 1 [0074.271] CloseHandle (hObject=0x1c8) returned 1 [0074.273] MulDiv (nNumber=77, nNumerator=30000, nDenominator=93) returned 24839 [0074.273] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x6107, lParam=0x0) returned 0x5fc4 [0074.273] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned" [0074.273] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned") returned 52 [0074.273] lstrcpynW (in: lpString1=0x40a5f0, lpString2="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\Gestisk.For", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\Gestisk.For") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\Gestisk.For" [0074.273] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\Gestisk.For") returned 64 [0074.274] lstrcpynW (in: lpString1=0x438000, lpString2="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\Gestisk.For", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\Gestisk.For") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\Gestisk.For" [0074.274] MulDiv (nNumber=78, nNumerator=30000, nDenominator=93) returned 25161 [0074.274] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x6249, lParam=0x0) returned 0x6107 [0074.274] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned" [0074.274] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned") returned 52 [0074.274] lstrcpynW (in: lpString1=0x33b34c, lpString2="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\\\SHAURI\\Ld7\\elan.DIS", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\\\SHAURI\\Ld7\\elan.DIS") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\\\SHAURI\\Ld7\\elan.DIS" [0074.274] MulDiv (nNumber=79, nNumerator=30000, nDenominator=93) returned 25484 [0074.274] SendMessageW (hWnd=0x20326, Msg=0x402, wParam=0x638c, lParam=0x0) returned 0x6249 [0074.274] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.274] lstrlenW (lpString="") returned 0 [0074.274] IsWindow (hWnd=0x0) returned 0 [0074.274] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.275] lstrlenW (lpString="") returned 0 [0074.275] SetWindowLongW (hWnd=0x0, nIndex=-21, dwNewLong=3371514) returned 0 [0074.275] lstrcpynW (in: lpString1=0x46c800, lpString2="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\\\SHAURI\\Ld7\\elan.DIS", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\\\SHAURI\\Ld7\\elan.DIS") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\\\SHAURI\\Ld7\\elan.DIS" [0074.276] lstrcpynW (in: lpString1=0x40a5f0, lpString2="120", iMaxLength=1024 | out: lpString1="120") returned="120" [0074.276] lstrlenW (lpString="120") returned 3 [0074.276] lstrcpynW (in: lpString1=0x465800, lpString2="120", iMaxLength=1024 | out: lpString1="120") returned="120" [0074.276] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\\\SHAURI\\Ld7\\elan.DIS", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\\\SHAURI\\Ld7\\elan.DIS") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\\\SHAURI\\Ld7\\elan.DIS" [0074.276] lstrlenW (lpString="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\\\SHAURI\\Ld7\\elan.DIS") returned 73 [0074.276] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\\\SHAURI\\Ld7\\elan.DIS", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\\\SHAURI\\Ld7\\elan.DIS") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\\\SHAURI\\Ld7\\elan.DIS" [0074.277] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\\\SHAURI\\Ld7\\elan.DIS" (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri\\ld7\\elan.dis")) returned 0x20 [0074.277] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\\\SHAURI\\Ld7\\elan.DIS" (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri\\ld7\\elan.dis"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1c8 [0074.277] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="456") returned 3 [0074.277] SHGetFolderPathW (in: hwnd=0x80062, csidl=45, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\ProgramData\\Microsoft\\Windows\\Templates") returned 0x0 [0074.277] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Windows\\Templates") returned 42 [0074.277] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\ProgramData\\Microsoft\\Windows\\Templates\\Desmitis.Met", iMaxLength=1024 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows\\Templates\\Desmitis.Met") returned="C:\\ProgramData\\Microsoft\\Windows\\Templates\\Desmitis.Met" [0074.277] SHGetFolderPathW (in: hwnd=0x80062, csidl=53, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Music") returned 0x0 [0074.277] lstrlenW (lpString="C:\\Users\\Public\\Music") returned 21 [0074.277] lstrcpynW (in: lpString1=0x40b5f0, lpString2="C:\\Users\\Public\\Music\\Dissent.Att", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Music\\Dissent.Att") returned="C:\\Users\\Public\\Music\\Dissent.Att" [0074.278] SHGetFolderPathW (in: hwnd=0x80062, csidl=45, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\ProgramData\\Microsoft\\Windows\\Templates") returned 0x0 [0074.278] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Windows\\Templates") returned 42 [0074.278] SHGetFolderPathW (in: hwnd=0x80062, csidl=53, hToken=0x0, dwFlags=0x0, pszPath=0x432f12 | out: pszPath="C:\\Users\\Public\\Music") returned 0x0 [0074.278] lstrlenW (lpString="C:\\Users\\Public\\Music") returned 21 [0074.278] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\ProgramData\\Microsoft\\Windows\\Templates\\Desmitis.Met->C:\\Users\\Public\\Music\\Dissent.Att", iMaxLength=1024 | out: lpString1="C:\\ProgramData\\Microsoft\\Windows\\Templates\\Desmitis.Met->C:\\Users\\Public\\Music\\Dissent.Att") returned="C:\\ProgramData\\Microsoft\\Windows\\Templates\\Desmitis.Met->C:\\Users\\Public\\Music\\Dissent.Att" [0074.278] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Templates\\Desmitis.Met" (normalized: "c:\\programdata\\microsoft\\windows\\templates\\desmitis.met"), lpNewFileName="C:\\Users\\Public\\Music\\Dissent.Att" (normalized: "c:\\users\\public\\music\\dissent.att")) returned 0 [0074.278] lstrcpynW (in: lpString1=0x40a5f0, lpString2="Paraphrosyne", iMaxLength=1024 | out: lpString1="Paraphrosyne") returned="Paraphrosyne" [0074.278] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Hidfrelsens\\Bratscherne", iMaxLength=1024 | out: lpString1="Software\\Hidfrelsens\\Bratscherne") returned="Software\\Hidfrelsens\\Bratscherne" [0074.278] RegCreateKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Hidfrelsens\\Bratscherne", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0074.280] SetFilePointer (in: hFile=0x180, lDistanceToMove=205043, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x320f3 [0074.280] ReadFile (in: hFile=0x180, lpBuffer=0x2dff978, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2dff8b4, lpOverlapped=0x0 | out: lpBuffer=0x2dff978*, lpNumberOfBytesRead=0x2dff8b4*=0x4, lpOverlapped=0x0) returned 1 [0074.280] ReadFile (in: hFile=0x180, lpBuffer=0x40b5f0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2dff8b4, lpOverlapped=0x0 | out: lpBuffer=0x40b5f0*, lpNumberOfBytesRead=0x2dff8b4*=0x4, lpOverlapped=0x0) returned 1 [0074.280] RegSetValueExW (in: hKey=0x1c0, lpValueName="Paraphrosyne", Reserved=0x0, dwType=0x3, lpData=0x40b5f0*, cbData=0x4 | out: lpData=0x40b5f0*) returned 0x0 [0074.281] RegCloseKey (hKey=0x1c0) returned 0x0 [0074.281] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=2364, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x93c [0074.281] lstrcpynW (in: lpString1=0x40a5f0, lpString2="14282", iMaxLength=1024 | out: lpString1="14282") returned="14282" [0074.281] lstrlenW (lpString="14282") returned 5 [0074.281] lstrcpynW (in: lpString1=0x45e800, lpString2="14282", iMaxLength=1024 | out: lpString1="14282") returned="14282" [0074.281] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="B") returned 0 [0074.281] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x93d [0074.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="B") returned 1 [0074.281] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="E") returned 0 [0074.282] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x93e [0074.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="E") returned 1 [0074.282] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="C") returned 0 [0074.282] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x93f [0074.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="C") returned 1 [0074.282] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="D") returned 0 [0074.282] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x940 [0074.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="D") returned 1 [0074.282] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="2") returned 0 [0074.282] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x941 [0074.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="2") returned 1 [0074.282] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="7") returned 0 [0074.282] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x942 [0074.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="7") returned 1 [0074.283] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="D") returned 0 [0074.283] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x943 [0074.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="D") returned 1 [0074.283] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="2") returned 0 [0074.283] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x944 [0074.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="2") returned 1 [0074.283] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="B") returned 0 [0074.283] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x945 [0074.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="B") returned 1 [0074.283] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="0") returned 0 [0074.283] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x946 [0074.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="0") returned 1 [0074.284] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="C") returned 0 [0074.284] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x947 [0074.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="C") returned 1 [0074.284] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="4") returned 0 [0074.284] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x948 [0074.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="4") returned 1 [0074.284] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="4") returned 0 [0074.284] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x949 [0074.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="4") returned 1 [0074.284] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="6") returned 0 [0074.284] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x94a [0074.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="6") returned 1 [0074.284] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="A") returned 0 [0074.285] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x94b [0074.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="A") returned 1 [0074.285] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="E") returned 0 [0074.285] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x94c [0074.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="E") returned 1 [0074.285] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="C") returned 0 [0074.285] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x94d [0074.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="C") returned 1 [0074.285] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="F") returned 0 [0074.285] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x94e [0074.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="F") returned 1 [0074.285] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="B") returned 0 [0074.285] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x94f [0074.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="B") returned 1 [0074.286] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="2") returned 0 [0074.286] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x950 [0074.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="2") returned 1 [0074.286] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="3") returned 0 [0074.286] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x951 [0074.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="3") returned 1 [0074.286] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="6") returned 0 [0074.286] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x952 [0074.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="6") returned 1 [0074.286] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="E") returned 0 [0074.286] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x953 [0074.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="E") returned 1 [0074.287] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="E") returned 0 [0074.287] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x954 [0074.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="E") returned 1 [0074.287] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="9") returned 0 [0074.287] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x955 [0074.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0074.287] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="0") returned 0 [0074.287] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x956 [0074.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="0") returned 1 [0074.287] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="E") returned 0 [0074.287] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x957 [0074.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="E") returned 1 [0074.287] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="9") returned 0 [0074.288] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x958 [0074.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0074.288] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="0") returned 0 [0074.288] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x959 [0074.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="0") returned 1 [0074.288] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="1") returned 0 [0074.288] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x95a [0074.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="1") returned 1 [0074.288] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="F") returned 0 [0074.288] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x95b [0074.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="F") returned 1 [0074.288] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.290] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="9") returned 0 [0074.290] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x95c [0074.290] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0074.290] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.290] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="B") returned 0 [0074.290] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x95d [0074.290] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="B") returned 1 [0074.290] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.290] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="3") returned 0 [0074.290] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x95e [0074.290] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="3") returned 1 [0074.290] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.291] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="E") returned 0 [0074.291] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x95f [0074.291] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="E") returned 1 [0074.291] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.291] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="1") returned 0 [0074.291] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x960 [0074.291] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="1") returned 1 [0074.291] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.291] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="1") returned 0 [0074.291] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x961 [0074.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="1") returned 1 [0074.292] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="9") returned 0 [0074.292] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x962 [0074.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0074.292] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="F") returned 0 [0074.292] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x963 [0074.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="F") returned 1 [0074.292] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="9") returned 0 [0074.292] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x964 [0074.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0074.292] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.292] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="B") returned 0 [0074.292] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x965 [0074.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="B") returned 1 [0074.293] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="4") returned 0 [0074.293] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x966 [0074.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="4") returned 1 [0074.293] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="A") returned 0 [0074.293] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x967 [0074.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="A") returned 1 [0074.293] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="0") returned 0 [0074.293] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x968 [0074.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="0") returned 1 [0074.293] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="1") returned 0 [0074.293] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x969 [0074.293] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="1") returned 1 [0074.293] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="8") returned 0 [0074.294] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x96a [0074.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="8") returned 1 [0074.294] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="B") returned 0 [0074.294] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x96b [0074.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="B") returned 1 [0074.294] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="C") returned 0 [0074.294] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x96c [0074.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="C") returned 1 [0074.294] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="8") returned 0 [0074.294] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x96d [0074.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="8") returned 1 [0074.294] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="7") returned 0 [0074.295] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x96e [0074.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="7") returned 1 [0074.295] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="B") returned 0 [0074.295] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x96f [0074.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="B") returned 1 [0074.295] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="C") returned 0 [0074.295] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x970 [0074.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="C") returned 1 [0074.295] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 0 [0074.295] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x971 [0074.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 1 [0074.295] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 0 [0074.295] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x972 [0074.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 1 [0074.296] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="B") returned 0 [0074.296] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x973 [0074.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="B") returned 1 [0074.296] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="0") returned 0 [0074.296] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x974 [0074.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="0") returned 1 [0074.296] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="D") returned 0 [0074.296] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x975 [0074.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="D") returned 1 [0074.296] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 0 [0074.296] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x976 [0074.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 1 [0074.296] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="E") returned 0 [0074.297] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x977 [0074.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="E") returned 1 [0074.297] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="1") returned 0 [0074.297] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x978 [0074.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="1") returned 1 [0074.297] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 0 [0074.297] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x979 [0074.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 1 [0074.297] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 0 [0074.297] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x97a [0074.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 1 [0074.297] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.297] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="A") returned 0 [0074.297] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x97b [0074.298] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="A") returned 1 [0074.298] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.298] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="C") returned 0 [0074.298] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x97c [0074.298] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="C") returned 1 [0074.298] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.298] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="8") returned 0 [0074.298] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x97d [0074.298] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="8") returned 1 [0074.298] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.298] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="D") returned 0 [0074.298] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x97e [0074.298] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="D") returned 1 [0074.298] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.298] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="B") returned 0 [0074.298] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x97f [0074.298] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="B") returned 1 [0074.298] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="0") returned 0 [0074.299] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x980 [0074.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="0") returned 1 [0074.299] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="4") returned 0 [0074.299] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x981 [0074.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="4") returned 1 [0074.299] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 0 [0074.299] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x982 [0074.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 1 [0074.299] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="A") returned 0 [0074.299] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x983 [0074.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="A") returned 1 [0074.299] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="C") returned 0 [0074.299] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x984 [0074.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="C") returned 1 [0074.300] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="C") returned 0 [0074.300] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x985 [0074.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="C") returned 1 [0074.300] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 0 [0074.300] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x986 [0074.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 1 [0074.300] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="B") returned 0 [0074.300] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x987 [0074.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="B") returned 1 [0074.300] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="8") returned 0 [0074.300] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x988 [0074.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="8") returned 1 [0074.301] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="4") returned 0 [0074.301] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x989 [0074.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="4") returned 1 [0074.301] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 0 [0074.301] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x98a [0074.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 1 [0074.301] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="A") returned 0 [0074.301] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x98b [0074.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="A") returned 1 [0074.301] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="C") returned 0 [0074.301] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x98c [0074.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="C") returned 1 [0074.301] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.302] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="C") returned 0 [0074.302] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x98d [0074.302] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="C") returned 1 [0074.302] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.302] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 0 [0074.302] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x98e [0074.302] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 1 [0074.302] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.302] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="A") returned 0 [0074.302] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x98f [0074.302] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="A") returned 1 [0074.302] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.302] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="4") returned 0 [0074.302] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x990 [0074.302] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="4") returned 1 [0074.302] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.302] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 0 [0074.302] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x991 [0074.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 1 [0074.303] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 0 [0074.303] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x992 [0074.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 1 [0074.303] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="F") returned 0 [0074.303] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x993 [0074.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="F") returned 1 [0074.303] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 0 [0074.303] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x994 [0074.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 1 [0074.303] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="D") returned 0 [0074.303] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x995 [0074.303] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="D") returned 1 [0074.304] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 0 [0074.304] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x996 [0074.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 1 [0074.304] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="B") returned 0 [0074.304] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x997 [0074.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="B") returned 1 [0074.304] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="8") returned 0 [0074.304] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x998 [0074.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="8") returned 1 [0074.304] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 0 [0074.304] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x999 [0074.304] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 1 [0074.304] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.305] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="9") returned 0 [0074.305] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x99a [0074.305] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0074.305] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.305] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="B") returned 0 [0074.305] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x99b [0074.305] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="B") returned 1 [0074.305] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.305] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="C") returned 0 [0074.305] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x99c [0074.305] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="C") returned 1 [0074.305] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.305] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="8") returned 0 [0074.305] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x99d [0074.305] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="8") returned 1 [0074.305] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.305] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 0 [0074.306] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x99e [0074.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 1 [0074.306] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="A") returned 0 [0074.306] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x99f [0074.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="A") returned 1 [0074.306] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="8") returned 0 [0074.306] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9a0 [0074.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="8") returned 1 [0074.306] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="4") returned 0 [0074.306] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9a1 [0074.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="4") returned 1 [0074.306] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 0 [0074.306] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9a2 [0074.307] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 1 [0074.308] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.308] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="B") returned 0 [0074.308] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9a3 [0074.308] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="B") returned 1 [0074.308] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.308] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="0") returned 0 [0074.308] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9a4 [0074.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="0") returned 1 [0074.309] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="D") returned 0 [0074.309] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9a5 [0074.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="D") returned 1 [0074.309] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 0 [0074.309] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9a6 [0074.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 1 [0074.309] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="E") returned 0 [0074.309] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9a7 [0074.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="E") returned 1 [0074.309] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="1") returned 0 [0074.309] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9a8 [0074.309] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="1") returned 1 [0074.309] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.310] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 0 [0074.310] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9a9 [0074.310] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 1 [0074.310] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.310] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 0 [0074.310] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9aa [0074.310] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 1 [0074.310] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.310] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="A") returned 0 [0074.310] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9ab [0074.310] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="A") returned 1 [0074.310] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.310] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="8") returned 0 [0074.310] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9ac [0074.310] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="8") returned 1 [0074.310] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.310] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="D") returned 0 [0074.310] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9ad [0074.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="D") returned 1 [0074.311] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="9") returned 0 [0074.311] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9ae [0074.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0074.311] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="A") returned 0 [0074.311] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9af [0074.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="A") returned 1 [0074.311] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="8") returned 0 [0074.311] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9b0 [0074.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="8") returned 1 [0074.311] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="1") returned 0 [0074.311] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9b1 [0074.311] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="1") returned 1 [0074.312] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.312] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="C") returned 0 [0074.312] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9b2 [0074.312] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="C") returned 1 [0074.312] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.312] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="B") returned 0 [0074.312] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9b3 [0074.312] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="B") returned 1 [0074.312] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.312] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="C") returned 0 [0074.312] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9b4 [0074.312] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="C") returned 1 [0074.312] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.312] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="C") returned 0 [0074.312] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9b5 [0074.312] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="C") returned 1 [0074.312] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.313] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 0 [0074.313] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9b6 [0074.313] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="5") returned 1 [0074.313] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.313] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="F") returned 0 [0074.313] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9b7 [0074.313] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="F") returned 1 [0074.313] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.313] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="0") returned 0 [0074.313] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9b8 [0074.313] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=1, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="0") returned 1 [0074.313] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.313] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x8, lpMultiByteStr=0x2dffc6e, cbMultiByte=2, lpWideCharStr=0x2dffc14, cchWideChar=1 | out: lpWideCharStr="4") returned 0 [0074.313] SetFilePointer (in: hFile=0x1c8, lDistanceToMove=-1, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9b9 [0074.313] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.314] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.314] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.314] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.314] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.314] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.314] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.314] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.314] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.314] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.315] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.315] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.315] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.315] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.315] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.315] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.315] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.315] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.315] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.315] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.315] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.315] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.316] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.316] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.316] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.316] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.316] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.316] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.316] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.316] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.316] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.316] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.316] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.316] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.317] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.317] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.317] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.317] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.317] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.317] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.317] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.317] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.317] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.317] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.317] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.317] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.318] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.318] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.318] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.318] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.318] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.318] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.318] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.318] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.318] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.318] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.318] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.318] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.319] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.319] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.319] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.319] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.319] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.319] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.319] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.319] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.319] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.319] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.319] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.319] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.320] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.320] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.320] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.320] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.320] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.320] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.320] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.320] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.320] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.320] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.320] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.320] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.321] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.321] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.321] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.321] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.321] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.321] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.321] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.321] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.321] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.321] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.321] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.321] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.321] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.322] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.322] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.322] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.322] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.322] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.322] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.322] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.322] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.322] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.322] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.322] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.323] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.323] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.323] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.323] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.323] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.323] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.323] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.323] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.323] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.323] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.323] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.323] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.323] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.324] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.324] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.324] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.324] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.324] ReadFile (in: hFile=0x1c8, lpBuffer=0x2dffc6e, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x2dffc24, lpOverlapped=0x0 | out: lpBuffer=0x2dffc6e*, lpNumberOfBytesRead=0x2dffc24*=0x2, lpOverlapped=0x0) returned 1 [0074.326] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0074.326] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20019, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0074.327] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0074.327] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.327] lstrlenW (lpString="") returned 0 [0074.327] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.327] lstrlenW (lpString="") returned 0 [0074.327] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.327] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.327] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.328] lstrlenW (lpString="") returned 0 [0074.328] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrlenW (lpString="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned 1023 [0074.328] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0074.328] lstrcpynW (in: lpString1=0x46d000, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0074.328] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20019, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0074.328] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0074.328] RegCloseKey (hKey=0x1c0) returned 0x0 [0074.329] lstrcpynW (in: lpString1=0x432ea4, lpString2="BECD27D2", iMaxLength=1024 | out: lpString1="BECD27D2") returned="BECD27D2" [0074.329] lstrlenW (lpString="BECD27D2") returned 8 [0074.329] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1262834254") returned 10 [0074.329] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0074.329] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0074.329] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0074.329] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0074.329] RegCloseKey (hKey=0x1c0) returned 0x0 [0074.329] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0074.332] lstrlenW (lpString="C:\\Users\\kEecfMwgj") returned 18 [0074.332] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0074.332] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und")) returned 0xffffffff [0074.332] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0074.332] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0074.332] lstrcpynW (in: lpString1=0x432ea0, lpString2="1262834254", iMaxLength=1024 | out: lpString1="1262834254") returned="1262834254" [0074.332] lstrlenW (lpString="1262834254") returned 10 [0074.332] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="4B45524E") returned 8 [0074.332] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.335] lstrlenW (lpString="C:\\Users\\Public\\Documents") returned 25 [0074.335] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.335] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.336] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.336] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.337] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.337] lstrlenW (lpString="0") returned 1 [0074.337] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.337] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.337] lstrlenW (lpString="0") returned 1 [0074.337] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.337] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.337] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.337] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.337] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.337] lstrlenW (lpString="0") returned 1 [0074.337] lstrcpynW (in: lpString1=0x432ea0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0074.337] lstrlenW (lpString="4B45524E") returned 8 [0074.337] lstrcpynW (in: lpString1=0x40a5f0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0074.337] lstrlenW (lpString="4B45524E") returned 8 [0074.338] lstrcpynW (in: lpString1=0x46b000, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0074.338] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.338] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.338] lstrlenW (lpString="") returned 0 [0074.338] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.338] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.338] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.338] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.338] lstrcpynW (in: lpString1=0x432ea4, lpString2="4B", iMaxLength=1024 | out: lpString1="4B") returned="4B" [0074.339] lstrlenW (lpString="4B") returned 2 [0074.339] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="K") returned 1 [0074.339] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.339] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.339] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0074.339] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.339] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.339] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.339] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.339] lstrcpynW (in: lpString1=0x432ea0, lpString2="K", iMaxLength=1024 | out: lpString1="K") returned="K" [0074.339] lstrlenW (lpString="K") returned 1 [0074.340] lstrcpynW (in: lpString1=0x40b5f0, lpString2="K", iMaxLength=1024 | out: lpString1="K") returned="K" [0074.340] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.340] lstrcmpiW (lpString1="K", lpString2="^") returned 1 [0074.340] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.342] lstrlenW (lpString="C:\\Windows\\resources") returned 20 [0074.342] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.342] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.343] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.343] lstrlenW (lpString="C:\\Users\\Public\\Documents") returned 25 [0074.343] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.343] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.343] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.343] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.343] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.343] lstrlenW (lpString="") returned 0 [0074.344] lstrcpynW (in: lpString1=0x432ea0, lpString2="K", iMaxLength=1024 | out: lpString1="K") returned="K" [0074.344] lstrlenW (lpString="K") returned 1 [0074.344] lstrcpynW (in: lpString1=0x40a5f0, lpString2="K", iMaxLength=1024 | out: lpString1="K") returned="K" [0074.344] lstrlenW (lpString="K") returned 1 [0074.344] lstrcpynW (in: lpString1=0x46c000, lpString2="K", iMaxLength=1024 | out: lpString1="K") returned="K" [0074.344] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.344] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.344] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.344] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.344] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.344] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.345] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.345] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.345] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.345] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.346] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.346] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.346] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.346] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.346] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0074.347] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.347] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.347] lstrlenW (lpString="C:\\Windows") returned 10 [0074.347] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0074.347] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.347] lstrlenW (lpString="C:\\Windows") returned 10 [0074.348] lstrlenW (lpString="C:") returned 2 [0074.348] lstrlenW (lpString="C:") returned 2 [0074.348] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.348] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.348] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.348] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.348] lstrlenW (lpString="524386") returned 6 [0074.348] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.348] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.348] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.348] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.348] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.348] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.349] lstrlenW (lpString="0") returned 1 [0074.349] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0074.349] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.349] lstrlenW (lpString="2") returned 1 [0074.349] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.349] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.349] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.349] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.349] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.349] lstrlenW (lpString="2") returned 1 [0074.349] lstrcpynW (in: lpString1=0x432ea0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0074.349] lstrlenW (lpString="4B45524E") returned 8 [0074.349] lstrcpynW (in: lpString1=0x40a5f0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0074.349] lstrlenW (lpString="4B45524E") returned 8 [0074.349] lstrcpynW (in: lpString1=0x46b000, lpString2="45524E", iMaxLength=1024 | out: lpString1="45524E") returned="45524E" [0074.349] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.349] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.349] lstrlenW (lpString="") returned 0 [0074.349] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.349] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.349] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.349] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.349] lstrcpynW (in: lpString1=0x432ea4, lpString2="45", iMaxLength=1024 | out: lpString1="45") returned="45" [0074.349] lstrlenW (lpString="45") returned 2 [0074.349] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="E") returned 1 [0074.349] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.350] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.350] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0074.350] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.350] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.350] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.350] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.350] lstrcpynW (in: lpString1=0x432ea0, lpString2="E", iMaxLength=1024 | out: lpString1="E") returned="E" [0074.350] lstrlenW (lpString="E") returned 1 [0074.350] lstrcpynW (in: lpString1=0x40b5f0, lpString2="E", iMaxLength=1024 | out: lpString1="E") returned="E" [0074.350] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.350] lstrcmpiW (lpString1="E", lpString2="^") returned 1 [0074.350] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.350] lstrlenW (lpString="C:\\Windows\\resources") returned 20 [0074.350] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.351] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.351] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.351] lstrlenW (lpString="C:\\Users\\Public\\Documents") returned 25 [0074.351] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.351] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.351] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.351] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.351] lstrcpynW (in: lpString1=0x432ea0, lpString2="K", iMaxLength=1024 | out: lpString1="K") returned="K" [0074.351] lstrlenW (lpString="K") returned 1 [0074.351] lstrcpynW (in: lpString1=0x432ea2, lpString2="E", iMaxLength=1024 | out: lpString1="E") returned="E" [0074.351] lstrlenW (lpString="E") returned 1 [0074.351] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KE", iMaxLength=1024 | out: lpString1="KE") returned="KE" [0074.352] lstrlenW (lpString="KE") returned 2 [0074.352] lstrcpynW (in: lpString1=0x46c000, lpString2="KE", iMaxLength=1024 | out: lpString1="KE") returned="KE" [0074.352] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.352] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.352] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.352] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.352] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.352] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.352] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.353] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.353] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.353] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.353] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.353] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.354] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.354] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.354] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0074.354] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.354] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.355] lstrlenW (lpString="C:\\Windows") returned 10 [0074.355] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0074.355] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.355] lstrlenW (lpString="C:\\Windows") returned 10 [0074.355] lstrlenW (lpString="C:") returned 2 [0074.355] lstrlenW (lpString="C:") returned 2 [0074.355] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.355] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.355] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.356] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.356] lstrlenW (lpString="524386") returned 6 [0074.356] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.356] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.356] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.356] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.356] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.356] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.356] lstrlenW (lpString="2") returned 1 [0074.356] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0074.356] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.356] lstrlenW (lpString="4") returned 1 [0074.356] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.356] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.356] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.356] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.356] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.356] lstrlenW (lpString="4") returned 1 [0074.356] lstrcpynW (in: lpString1=0x432ea0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0074.356] lstrlenW (lpString="4B45524E") returned 8 [0074.356] lstrcpynW (in: lpString1=0x40a5f0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0074.356] lstrlenW (lpString="4B45524E") returned 8 [0074.356] lstrcpynW (in: lpString1=0x46b000, lpString2="524E", iMaxLength=1024 | out: lpString1="524E") returned="524E" [0074.357] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.357] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.357] lstrlenW (lpString="") returned 0 [0074.357] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.357] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.357] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.357] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.357] lstrcpynW (in: lpString1=0x432ea4, lpString2="52", iMaxLength=1024 | out: lpString1="52") returned="52" [0074.357] lstrlenW (lpString="52") returned 2 [0074.357] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="R") returned 1 [0074.357] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.357] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.357] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0074.357] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.357] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.357] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.357] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.357] lstrcpynW (in: lpString1=0x432ea0, lpString2="R", iMaxLength=1024 | out: lpString1="R") returned="R" [0074.357] lstrlenW (lpString="R") returned 1 [0074.358] lstrcpynW (in: lpString1=0x40b5f0, lpString2="R", iMaxLength=1024 | out: lpString1="R") returned="R" [0074.358] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.358] lstrcmpiW (lpString1="R", lpString2="^") returned 1 [0074.358] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.358] lstrlenW (lpString="C:\\Windows\\resources") returned 20 [0074.358] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.358] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.358] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.358] lstrlenW (lpString="C:\\Users\\Public\\Documents") returned 25 [0074.358] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.358] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.359] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.359] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.359] lstrcpynW (in: lpString1=0x432ea0, lpString2="KE", iMaxLength=1024 | out: lpString1="KE") returned="KE" [0074.359] lstrlenW (lpString="KE") returned 2 [0074.359] lstrcpynW (in: lpString1=0x432ea4, lpString2="R", iMaxLength=1024 | out: lpString1="R") returned="R" [0074.359] lstrlenW (lpString="R") returned 1 [0074.359] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KER", iMaxLength=1024 | out: lpString1="KER") returned="KER" [0074.359] lstrlenW (lpString="KER") returned 3 [0074.359] lstrcpynW (in: lpString1=0x46c000, lpString2="KER", iMaxLength=1024 | out: lpString1="KER") returned="KER" [0074.359] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.359] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.359] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.359] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.359] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.359] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.360] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.360] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.360] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.360] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.361] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.361] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.361] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.361] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.361] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0074.362] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.362] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.362] lstrlenW (lpString="C:\\Windows") returned 10 [0074.362] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0074.362] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.362] lstrlenW (lpString="C:\\Windows") returned 10 [0074.363] lstrlenW (lpString="C:") returned 2 [0074.363] lstrlenW (lpString="C:") returned 2 [0074.363] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.363] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.363] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.363] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.363] lstrlenW (lpString="524386") returned 6 [0074.363] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.363] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.363] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.363] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.363] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.363] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.363] lstrlenW (lpString="4") returned 1 [0074.363] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0074.363] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.363] lstrlenW (lpString="6") returned 1 [0074.363] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.363] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.364] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.364] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.364] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.364] lstrlenW (lpString="6") returned 1 [0074.364] lstrcpynW (in: lpString1=0x432ea0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0074.364] lstrlenW (lpString="4B45524E") returned 8 [0074.364] lstrcpynW (in: lpString1=0x40a5f0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0074.364] lstrlenW (lpString="4B45524E") returned 8 [0074.364] lstrcpynW (in: lpString1=0x46b000, lpString2="4E", iMaxLength=1024 | out: lpString1="4E") returned="4E" [0074.364] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.364] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.364] lstrlenW (lpString="") returned 0 [0074.364] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.364] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.364] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.364] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.364] lstrcpynW (in: lpString1=0x432ea4, lpString2="4E", iMaxLength=1024 | out: lpString1="4E") returned="4E" [0074.364] lstrlenW (lpString="4E") returned 2 [0074.364] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="N") returned 1 [0074.364] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.364] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.364] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0074.365] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.365] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.365] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.365] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.365] lstrcpynW (in: lpString1=0x432ea0, lpString2="N", iMaxLength=1024 | out: lpString1="N") returned="N" [0074.365] lstrlenW (lpString="N") returned 1 [0074.365] lstrcpynW (in: lpString1=0x40b5f0, lpString2="N", iMaxLength=1024 | out: lpString1="N") returned="N" [0074.365] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.365] lstrcmpiW (lpString1="N", lpString2="^") returned 1 [0074.365] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.365] lstrlenW (lpString="C:\\Windows\\resources") returned 20 [0074.365] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.365] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.365] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.366] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.366] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.366] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.366] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.366] lstrcpynW (in: lpString1=0x432ea0, lpString2="KER", iMaxLength=1024 | out: lpString1="KER") returned="KER" [0074.366] lstrlenW (lpString="KER") returned 3 [0074.366] lstrcpynW (in: lpString1=0x432ea6, lpString2="N", iMaxLength=1024 | out: lpString1="N") returned="N" [0074.366] lstrlenW (lpString="N") returned 1 [0074.366] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERN", iMaxLength=1024 | out: lpString1="KERN") returned="KERN" [0074.366] lstrlenW (lpString="KERN") returned 4 [0074.366] lstrcpynW (in: lpString1=0x46c000, lpString2="KERN", iMaxLength=1024 | out: lpString1="KERN") returned="KERN" [0074.366] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.366] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.367] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.367] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.367] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.367] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.367] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.367] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.367] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.367] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0074.367] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.368] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.368] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0074.368] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.368] lstrlenW (lpString="C:\\Windows") returned 10 [0074.368] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.368] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.368] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.368] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.368] lstrlenW (lpString="524386") returned 6 [0074.368] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.368] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.368] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.369] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.369] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.369] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.369] lstrlenW (lpString="6") returned 1 [0074.369] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0074.369] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.369] lstrlenW (lpString="8") returned 1 [0074.369] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0074.369] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0074.369] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0074.369] lstrlenW (lpString="Execute: ") returned 9 [0074.369] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0074.369] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0074.369] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0xf [0074.370] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0xf [0074.370] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0xf, lParam=0x0) returned 0x1 [0074.370] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0074.371] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0074.371] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0074.371] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0074.371] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.371] lstrlenW (lpString="") returned 0 [0074.371] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="8") returned 1 [0074.371] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.371] lstrlenW (lpString="") returned 0 [0074.371] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.371] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.371] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.371] lstrlenW (lpString="8") returned 1 [0074.371] lstrcpynW (in: lpString1=0x432ea0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0074.371] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0074.371] lstrlenW (lpString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returned 1023 [0074.371] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0074.372] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1d0) returned 0x0 [0074.372] RegEnumValueW (in: hKey=0x1d0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0074.372] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.372] lstrcpynW (in: lpString1=0x432ea4, lpString2="B0C446AE", iMaxLength=1024 | out: lpString1="B0C446AE") returned="B0C446AE" [0074.372] lstrlenW (lpString="B0C446AE") returned 8 [0074.372] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1162621746") returned 10 [0074.372] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0074.372] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0074.372] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1d0, lpdwDisposition=0x0) returned 0x0 [0074.374] RegSetValueExW (in: hKey=0x1d0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0074.374] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.374] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0074.374] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0074.376] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0074.376] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0074.376] lstrcpynW (in: lpString1=0x432ea0, lpString2="1162621746", iMaxLength=1024 | out: lpString1="1162621746") returned="1162621746" [0074.376] lstrlenW (lpString="1162621746") returned 10 [0074.376] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="454C3332") returned 8 [0074.376] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.376] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.376] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.381] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.381] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.381] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.381] lstrlenW (lpString="0") returned 1 [0074.381] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.381] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.382] lstrlenW (lpString="0") returned 1 [0074.382] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.382] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.382] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.382] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.382] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.382] lstrlenW (lpString="0") returned 1 [0074.382] lstrcpynW (in: lpString1=0x432ea0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0074.382] lstrlenW (lpString="454C3332") returned 8 [0074.382] lstrcpynW (in: lpString1=0x40a5f0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0074.382] lstrlenW (lpString="454C3332") returned 8 [0074.382] lstrcpynW (in: lpString1=0x46b000, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0074.382] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.382] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.382] lstrlenW (lpString="") returned 0 [0074.382] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.382] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.382] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.382] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.382] lstrcpynW (in: lpString1=0x432ea4, lpString2="45", iMaxLength=1024 | out: lpString1="45") returned="45" [0074.382] lstrlenW (lpString="45") returned 2 [0074.382] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="E") returned 1 [0074.382] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.382] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.383] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0074.383] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.383] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.383] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.383] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.383] lstrcpynW (in: lpString1=0x432ea0, lpString2="E", iMaxLength=1024 | out: lpString1="E") returned="E" [0074.383] lstrlenW (lpString="E") returned 1 [0074.383] lstrcpynW (in: lpString1=0x40b5f0, lpString2="E", iMaxLength=1024 | out: lpString1="E") returned="E" [0074.383] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.383] lstrcmpiW (lpString1="E", lpString2="^") returned 1 [0074.383] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.383] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.383] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.384] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.384] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.384] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.384] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.384] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.384] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERN", iMaxLength=1024 | out: lpString1="KERN") returned="KERN" [0074.384] lstrlenW (lpString="KERN") returned 4 [0074.384] lstrcpynW (in: lpString1=0x432ea8, lpString2="E", iMaxLength=1024 | out: lpString1="E") returned="E" [0074.384] lstrlenW (lpString="E") returned 1 [0074.384] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNE", iMaxLength=1024 | out: lpString1="KERNE") returned="KERNE" [0074.384] lstrlenW (lpString="KERNE") returned 5 [0074.384] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNE", iMaxLength=1024 | out: lpString1="KERNE") returned="KERNE" [0074.384] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.384] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.385] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.385] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.385] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.385] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.385] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.385] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.385] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.386] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0074.386] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.386] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.386] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0074.386] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.386] lstrlenW (lpString="C:\\Windows") returned 10 [0074.386] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.386] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.386] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.386] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.386] lstrlenW (lpString="524386") returned 6 [0074.386] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.386] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.387] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.387] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.387] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.387] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.387] lstrlenW (lpString="0") returned 1 [0074.387] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0074.387] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.387] lstrlenW (lpString="2") returned 1 [0074.387] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.387] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.387] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.387] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.387] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.387] lstrlenW (lpString="2") returned 1 [0074.387] lstrcpynW (in: lpString1=0x432ea0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0074.387] lstrlenW (lpString="454C3332") returned 8 [0074.387] lstrcpynW (in: lpString1=0x40a5f0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0074.387] lstrlenW (lpString="454C3332") returned 8 [0074.387] lstrcpynW (in: lpString1=0x46b000, lpString2="4C3332", iMaxLength=1024 | out: lpString1="4C3332") returned="4C3332" [0074.387] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.387] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.387] lstrlenW (lpString="") returned 0 [0074.387] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.387] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.388] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.388] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.388] lstrcpynW (in: lpString1=0x432ea4, lpString2="4C", iMaxLength=1024 | out: lpString1="4C") returned="4C" [0074.388] lstrlenW (lpString="4C") returned 2 [0074.388] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="L") returned 1 [0074.388] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.388] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.388] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0074.388] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.388] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.388] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.388] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.388] lstrcpynW (in: lpString1=0x432ea0, lpString2="L", iMaxLength=1024 | out: lpString1="L") returned="L" [0074.388] lstrlenW (lpString="L") returned 1 [0074.388] lstrcpynW (in: lpString1=0x40b5f0, lpString2="L", iMaxLength=1024 | out: lpString1="L") returned="L" [0074.388] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.388] lstrcmpiW (lpString1="L", lpString2="^") returned 1 [0074.388] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.389] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.389] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.389] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.389] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.389] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.389] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.389] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.389] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNE", iMaxLength=1024 | out: lpString1="KERNE") returned="KERNE" [0074.389] lstrlenW (lpString="KERNE") returned 5 [0074.389] lstrcpynW (in: lpString1=0x432eaa, lpString2="L", iMaxLength=1024 | out: lpString1="L") returned="L" [0074.389] lstrlenW (lpString="L") returned 1 [0074.389] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL", iMaxLength=1024 | out: lpString1="KERNEL") returned="KERNEL" [0074.389] lstrlenW (lpString="KERNEL") returned 6 [0074.390] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL", iMaxLength=1024 | out: lpString1="KERNEL") returned="KERNEL" [0074.390] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.390] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.390] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.390] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.390] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.390] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.390] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.390] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.390] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.390] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0074.391] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.391] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.391] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0074.391] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.391] lstrlenW (lpString="C:\\Windows") returned 10 [0074.391] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.391] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.391] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.391] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.391] lstrlenW (lpString="524386") returned 6 [0074.391] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.391] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.392] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.392] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.392] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.392] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.392] lstrlenW (lpString="2") returned 1 [0074.392] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0074.392] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.392] lstrlenW (lpString="4") returned 1 [0074.392] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.392] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.392] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.392] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.392] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.392] lstrlenW (lpString="4") returned 1 [0074.392] lstrcpynW (in: lpString1=0x432ea0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0074.392] lstrlenW (lpString="454C3332") returned 8 [0074.392] lstrcpynW (in: lpString1=0x40a5f0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0074.392] lstrlenW (lpString="454C3332") returned 8 [0074.392] lstrcpynW (in: lpString1=0x46b000, lpString2="3332", iMaxLength=1024 | out: lpString1="3332") returned="3332" [0074.392] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.392] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.392] lstrlenW (lpString="") returned 0 [0074.392] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.393] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.393] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.393] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.393] lstrcpynW (in: lpString1=0x432ea4, lpString2="33", iMaxLength=1024 | out: lpString1="33") returned="33" [0074.393] lstrlenW (lpString="33") returned 2 [0074.393] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="3") returned 1 [0074.393] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.393] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.393] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0074.393] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.393] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.393] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.393] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.393] lstrcpynW (in: lpString1=0x432ea0, lpString2="3", iMaxLength=1024 | out: lpString1="3") returned="3" [0074.393] lstrlenW (lpString="3") returned 1 [0074.393] lstrcmpiW (lpString1="3", lpString2="^") returned 1 [0074.393] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.394] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.394] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.394] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.394] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.394] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.394] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.394] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.395] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.395] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.395] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.395] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.395] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0074.395] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.395] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.395] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0074.395] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.395] lstrlenW (lpString="C:\\Windows") returned 10 [0074.396] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.396] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.396] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.396] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.396] lstrlenW (lpString="524386") returned 6 [0074.396] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.396] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.396] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.396] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.396] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.396] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.396] lstrlenW (lpString="4") returned 1 [0074.396] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0074.396] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.396] lstrlenW (lpString="6") returned 1 [0074.396] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.396] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.396] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.396] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.397] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.397] lstrlenW (lpString="6") returned 1 [0074.397] lstrcpynW (in: lpString1=0x432ea0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0074.397] lstrlenW (lpString="454C3332") returned 8 [0074.397] lstrcpynW (in: lpString1=0x40a5f0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0074.397] lstrlenW (lpString="454C3332") returned 8 [0074.397] lstrcpynW (in: lpString1=0x46b000, lpString2="32", iMaxLength=1024 | out: lpString1="32") returned="32" [0074.397] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.397] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.397] lstrlenW (lpString="") returned 0 [0074.397] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.397] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.397] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.397] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.397] lstrcpynW (in: lpString1=0x432ea4, lpString2="32", iMaxLength=1024 | out: lpString1="32") returned="32" [0074.397] lstrlenW (lpString="32") returned 2 [0074.397] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="2") returned 1 [0074.397] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.397] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.397] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0074.398] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.398] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.398] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.398] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.398] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.398] lstrlenW (lpString="2") returned 1 [0074.398] lstrcpynW (in: lpString1=0x40b5f0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.398] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.398] lstrcmpiW (lpString1="2", lpString2="^") returned 1 [0074.398] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.398] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.398] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.398] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.398] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.398] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.399] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.399] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.399] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL3", iMaxLength=1024 | out: lpString1="KERNEL3") returned="KERNEL3" [0074.399] lstrlenW (lpString="KERNEL3") returned 7 [0074.399] lstrcpynW (in: lpString1=0x432eae, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.399] lstrlenW (lpString="2") returned 1 [0074.399] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32", iMaxLength=1024 | out: lpString1="KERNEL32") returned="KERNEL32" [0074.399] lstrlenW (lpString="KERNEL32") returned 8 [0074.399] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32", iMaxLength=1024 | out: lpString1="KERNEL32") returned="KERNEL32" [0074.399] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.399] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.399] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.399] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.399] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.400] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.400] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.400] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.400] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.400] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0074.400] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.400] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.401] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0074.401] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.401] lstrlenW (lpString="C:\\Windows") returned 10 [0074.401] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.401] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.401] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.401] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.401] lstrlenW (lpString="524386") returned 6 [0074.401] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.401] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.401] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.401] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.401] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.401] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.402] lstrlenW (lpString="6") returned 1 [0074.402] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0074.402] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.402] lstrlenW (lpString="8") returned 1 [0074.402] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0074.402] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0074.402] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0074.402] lstrlenW (lpString="Execute: ") returned 9 [0074.402] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0074.402] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0074.402] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x10 [0074.402] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x10 [0074.402] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x10, lParam=0x0) returned 0x1 [0074.403] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0074.403] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0074.403] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0074.403] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0074.403] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.403] lstrlenW (lpString="8") returned 1 [0074.403] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="16") returned 2 [0074.403] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.403] lstrlenW (lpString="") returned 0 [0074.403] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.403] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.403] lstrcpynW (in: lpString1=0x432ea0, lpString2="16", iMaxLength=1024 | out: lpString1="16") returned="16" [0074.403] lstrlenW (lpString="16") returned 2 [0074.404] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0074.404] lstrcpynW (in: lpString1=0x40a5f0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrlenW (lpString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returned 1023 [0074.404] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned="CFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0074.404] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0074.404] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1d0) returned 0x0 [0074.404] RegEnumValueW (in: hKey=0x1d0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0074.404] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.404] lstrcpynW (in: lpString1=0x432ea4, lpString2="CFB236EE", iMaxLength=1024 | out: lpString1="CFB236EE") returned="CFB236EE" [0074.404] lstrlenW (lpString="CFB236EE") returned 8 [0074.404] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="976896882") returned 9 [0074.404] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0074.404] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0074.404] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1d0, lpdwDisposition=0x0) returned 0x0 [0074.405] RegSetValueExW (in: hKey=0x1d0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0074.405] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.405] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0074.405] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0074.405] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0074.405] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0074.405] lstrcpynW (in: lpString1=0x432ea0, lpString2="976896882", iMaxLength=1024 | out: lpString1="976896882") returned="976896882" [0074.405] lstrlenW (lpString="976896882") returned 9 [0074.405] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="3A3A4372") returned 8 [0074.405] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.405] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.405] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.406] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.406] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.406] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.406] lstrlenW (lpString="0") returned 1 [0074.406] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.406] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.406] lstrlenW (lpString="0") returned 1 [0074.406] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.406] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.406] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.406] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.406] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.406] lstrlenW (lpString="0") returned 1 [0074.406] lstrcpynW (in: lpString1=0x432ea0, lpString2="3A3A4372", iMaxLength=1024 | out: lpString1="3A3A4372") returned="3A3A4372" [0074.406] lstrlenW (lpString="3A3A4372") returned 8 [0074.406] lstrcpynW (in: lpString1=0x40a5f0, lpString2="3A3A4372", iMaxLength=1024 | out: lpString1="3A3A4372") returned="3A3A4372" [0074.406] lstrlenW (lpString="3A3A4372") returned 8 [0074.406] lstrcpynW (in: lpString1=0x46b000, lpString2="3A3A4372", iMaxLength=1024 | out: lpString1="3A3A4372") returned="3A3A4372" [0074.406] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.407] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.407] lstrlenW (lpString="") returned 0 [0074.407] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.407] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.407] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.407] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.407] lstrcpynW (in: lpString1=0x432ea4, lpString2="3A", iMaxLength=1024 | out: lpString1="3A") returned="3A" [0074.407] lstrlenW (lpString="3A") returned 2 [0074.407] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=":") returned 1 [0074.407] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.407] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.407] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.407] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.407] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.407] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.407] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.407] lstrcpynW (in: lpString1=0x432ea0, lpString2=":", iMaxLength=1024 | out: lpString1=":") returned=":" [0074.408] lstrlenW (lpString=":") returned 1 [0074.408] lstrcpynW (in: lpString1=0x40b5f0, lpString2=":", iMaxLength=1024 | out: lpString1=":") returned=":" [0074.408] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.408] lstrcmpiW (lpString1=":", lpString2="^") returned -1 [0074.408] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.408] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.408] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.408] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.408] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.408] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.409] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.409] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.409] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32", iMaxLength=1024 | out: lpString1="KERNEL32") returned="KERNEL32" [0074.410] lstrlenW (lpString="KERNEL32") returned 8 [0074.410] lstrcpynW (in: lpString1=0x432eb0, lpString2=":", iMaxLength=1024 | out: lpString1=":") returned=":" [0074.410] lstrlenW (lpString=":") returned 1 [0074.410] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32:", iMaxLength=1024 | out: lpString1="KERNEL32:") returned="KERNEL32:" [0074.410] lstrlenW (lpString="KERNEL32:") returned 9 [0074.410] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32:", iMaxLength=1024 | out: lpString1="KERNEL32:") returned="KERNEL32:" [0074.410] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.410] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.410] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.410] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.410] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.410] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.410] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.410] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.411] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.411] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.411] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.411] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.411] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.411] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.411] lstrlenW (lpString="C:\\Windows") returned 10 [0074.411] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.411] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.411] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.412] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.412] lstrlenW (lpString="524386") returned 6 [0074.412] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.412] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.412] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.412] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.412] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.412] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.412] lstrlenW (lpString="0") returned 1 [0074.412] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0074.412] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.412] lstrlenW (lpString="2") returned 1 [0074.412] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.412] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.412] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.412] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.412] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.412] lstrlenW (lpString="2") returned 1 [0074.412] lstrcpynW (in: lpString1=0x432ea0, lpString2="3A3A4372", iMaxLength=1024 | out: lpString1="3A3A4372") returned="3A3A4372" [0074.412] lstrlenW (lpString="3A3A4372") returned 8 [0074.413] lstrcpynW (in: lpString1=0x40a5f0, lpString2="3A3A4372", iMaxLength=1024 | out: lpString1="3A3A4372") returned="3A3A4372" [0074.413] lstrlenW (lpString="3A3A4372") returned 8 [0074.413] lstrcpynW (in: lpString1=0x46b000, lpString2="3A4372", iMaxLength=1024 | out: lpString1="3A4372") returned="3A4372" [0074.413] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.413] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.413] lstrlenW (lpString="") returned 0 [0074.413] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.413] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.413] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.413] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.413] lstrcpynW (in: lpString1=0x432ea4, lpString2="3A", iMaxLength=1024 | out: lpString1="3A") returned="3A" [0074.413] lstrlenW (lpString="3A") returned 2 [0074.413] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=":") returned 1 [0074.413] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.413] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.413] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.413] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.413] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.414] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.414] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.414] lstrcpynW (in: lpString1=0x432ea0, lpString2=":", iMaxLength=1024 | out: lpString1=":") returned=":" [0074.414] lstrlenW (lpString=":") returned 1 [0074.414] lstrcpynW (in: lpString1=0x40b5f0, lpString2=":", iMaxLength=1024 | out: lpString1=":") returned=":" [0074.414] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.414] lstrcmpiW (lpString1=":", lpString2="^") returned -1 [0074.414] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.414] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.414] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.414] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.414] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.414] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.415] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.415] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.415] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32:", iMaxLength=1024 | out: lpString1="KERNEL32:") returned="KERNEL32:" [0074.415] lstrlenW (lpString="KERNEL32:") returned 9 [0074.415] lstrcpynW (in: lpString1=0x432eb2, lpString2=":", iMaxLength=1024 | out: lpString1=":") returned=":" [0074.415] lstrlenW (lpString=":") returned 1 [0074.415] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::", iMaxLength=1024 | out: lpString1="KERNEL32::") returned="KERNEL32::" [0074.415] lstrlenW (lpString="KERNEL32::") returned 10 [0074.415] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::", iMaxLength=1024 | out: lpString1="KERNEL32::") returned="KERNEL32::" [0074.415] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.415] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.415] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.415] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.415] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.415] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.415] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.416] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.416] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.416] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.416] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.416] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.416] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.416] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.416] lstrlenW (lpString="C:\\Windows") returned 10 [0074.417] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.417] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.417] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.417] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.417] lstrlenW (lpString="524386") returned 6 [0074.417] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.417] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.417] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.417] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.417] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.417] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.417] lstrlenW (lpString="2") returned 1 [0074.417] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0074.417] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.417] lstrlenW (lpString="4") returned 1 [0074.417] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.417] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.417] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.417] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.417] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.418] lstrlenW (lpString="4") returned 1 [0074.418] lstrcpynW (in: lpString1=0x432ea0, lpString2="3A3A4372", iMaxLength=1024 | out: lpString1="3A3A4372") returned="3A3A4372" [0074.418] lstrlenW (lpString="3A3A4372") returned 8 [0074.418] lstrcpynW (in: lpString1=0x40a5f0, lpString2="3A3A4372", iMaxLength=1024 | out: lpString1="3A3A4372") returned="3A3A4372" [0074.418] lstrlenW (lpString="3A3A4372") returned 8 [0074.418] lstrcpynW (in: lpString1=0x46b000, lpString2="4372", iMaxLength=1024 | out: lpString1="4372") returned="4372" [0074.418] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.418] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.418] lstrlenW (lpString="") returned 0 [0074.418] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.418] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.418] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.418] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.418] lstrcpynW (in: lpString1=0x432ea4, lpString2="43", iMaxLength=1024 | out: lpString1="43") returned="43" [0074.418] lstrlenW (lpString="43") returned 2 [0074.418] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="C") returned 1 [0074.418] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.418] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.418] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.418] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.419] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.419] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.419] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.419] lstrcpynW (in: lpString1=0x432ea0, lpString2="C", iMaxLength=1024 | out: lpString1="C") returned="C" [0074.419] lstrlenW (lpString="C") returned 1 [0074.419] lstrcpynW (in: lpString1=0x40b5f0, lpString2="C", iMaxLength=1024 | out: lpString1="C") returned="C" [0074.419] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.419] lstrcmpiW (lpString1="C", lpString2="^") returned 1 [0074.419] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.419] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.419] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.419] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.419] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.419] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.420] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.420] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.420] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::", iMaxLength=1024 | out: lpString1="KERNEL32::") returned="KERNEL32::" [0074.420] lstrlenW (lpString="KERNEL32::") returned 10 [0074.420] lstrcpynW (in: lpString1=0x432eb4, lpString2="C", iMaxLength=1024 | out: lpString1="C") returned="C" [0074.420] lstrlenW (lpString="C") returned 1 [0074.420] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::C", iMaxLength=1024 | out: lpString1="KERNEL32::C") returned="KERNEL32::C" [0074.420] lstrlenW (lpString="KERNEL32::C") returned 11 [0074.420] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::C", iMaxLength=1024 | out: lpString1="KERNEL32::C") returned="KERNEL32::C" [0074.420] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.420] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.420] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.420] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.420] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.420] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.421] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.421] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.421] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.421] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.421] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.421] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.421] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.421] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.421] lstrlenW (lpString="C:\\Windows") returned 10 [0074.421] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.422] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.422] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.422] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.422] lstrlenW (lpString="524386") returned 6 [0074.422] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.422] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.422] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.422] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.422] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.422] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.422] lstrlenW (lpString="4") returned 1 [0074.422] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0074.422] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.422] lstrlenW (lpString="6") returned 1 [0074.422] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.422] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.422] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.422] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.422] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.422] lstrlenW (lpString="6") returned 1 [0074.423] lstrcpynW (in: lpString1=0x432ea0, lpString2="3A3A4372", iMaxLength=1024 | out: lpString1="3A3A4372") returned="3A3A4372" [0074.423] lstrcpynW (in: lpString1=0x40a5f0, lpString2="3A3A4372", iMaxLength=1024 | out: lpString1="3A3A4372") returned="3A3A4372" [0074.423] lstrcpynW (in: lpString1=0x46b000, lpString2="72", iMaxLength=1024 | out: lpString1="72") returned="72" [0074.423] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.423] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.423] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.423] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.423] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.423] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.423] lstrcpynW (in: lpString1=0x432ea4, lpString2="72", iMaxLength=1024 | out: lpString1="72") returned="72" [0074.423] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="r") returned 1 [0074.423] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.423] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.423] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.423] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.423] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.423] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.423] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.424] lstrcpynW (in: lpString1=0x432ea0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0074.424] lstrlenW (lpString="r") returned 1 [0074.424] lstrcpynW (in: lpString1=0x40b5f0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0074.424] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.424] lstrcmpiW (lpString1="r", lpString2="^") returned 1 [0074.424] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.424] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.424] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.424] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.424] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.424] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.425] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.425] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.425] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::C", iMaxLength=1024 | out: lpString1="KERNEL32::C") returned="KERNEL32::C" [0074.425] lstrlenW (lpString="KERNEL32::C") returned 11 [0074.425] lstrcpynW (in: lpString1=0x432eb6, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0074.425] lstrlenW (lpString="r") returned 1 [0074.425] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::Cr", iMaxLength=1024 | out: lpString1="KERNEL32::Cr") returned="KERNEL32::Cr" [0074.425] lstrlenW (lpString="KERNEL32::Cr") returned 12 [0074.425] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::Cr", iMaxLength=1024 | out: lpString1="KERNEL32::Cr") returned="KERNEL32::Cr" [0074.425] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.425] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.425] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.425] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.425] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.425] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.425] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.425] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.426] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.426] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.426] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.426] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.426] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.426] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.426] lstrlenW (lpString="C:\\Windows") returned 10 [0074.426] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.426] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.426] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.427] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.427] lstrlenW (lpString="524386") returned 6 [0074.427] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.427] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.427] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.427] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.427] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.427] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.427] lstrlenW (lpString="6") returned 1 [0074.427] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0074.427] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.427] lstrlenW (lpString="8") returned 1 [0074.427] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0074.427] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0074.427] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0074.427] lstrlenW (lpString="Execute: ") returned 9 [0074.427] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0074.427] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0074.427] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x11 [0074.428] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x11 [0074.428] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x11, lParam=0x0) returned 0x1 [0074.428] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0074.428] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0074.428] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0074.429] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0074.429] lstrcpynW (in: lpString1=0x432ea0, lpString2="16", iMaxLength=1024 | out: lpString1="16") returned="16" [0074.429] lstrlenW (lpString="16") returned 2 [0074.429] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="24") returned 2 [0074.429] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.429] lstrlenW (lpString="") returned 0 [0074.429] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.429] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.429] lstrcpynW (in: lpString1=0x432ea0, lpString2="24", iMaxLength=1024 | out: lpString1="24") returned="24" [0074.429] lstrlenW (lpString="24") returned 2 [0074.429] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrlenW (lpString="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned 1023 [0074.429] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0074.429] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0074.429] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1d0) returned 0x0 [0074.429] RegEnumValueW (in: hKey=0x1d0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0074.430] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.430] lstrcpynW (in: lpString1=0x432ea4, lpString2="90E901F9", iMaxLength=1024 | out: lpString1="90E901F9") returned="90E901F9" [0074.430] lstrlenW (lpString="90E901F9") returned 8 [0074.430] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1700885605") returned 10 [0074.430] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0074.430] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0074.430] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1d0, lpdwDisposition=0x0) returned 0x0 [0074.430] RegSetValueExW (in: hKey=0x1d0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0074.430] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.430] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0074.430] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0074.430] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0074.431] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0074.431] lstrcpynW (in: lpString1=0x432ea0, lpString2="1700885605", iMaxLength=1024 | out: lpString1="1700885605") returned="1700885605" [0074.431] lstrlenW (lpString="1700885605") returned 10 [0074.431] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="65617465") returned 8 [0074.431] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.431] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.431] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.431] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.431] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.431] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.431] lstrlenW (lpString="0") returned 1 [0074.431] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.432] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.432] lstrlenW (lpString="0") returned 1 [0074.432] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.432] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.432] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.432] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.432] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.432] lstrlenW (lpString="0") returned 1 [0074.432] lstrcpynW (in: lpString1=0x432ea0, lpString2="65617465", iMaxLength=1024 | out: lpString1="65617465") returned="65617465" [0074.432] lstrlenW (lpString="65617465") returned 8 [0074.432] lstrcpynW (in: lpString1=0x40a5f0, lpString2="65617465", iMaxLength=1024 | out: lpString1="65617465") returned="65617465" [0074.432] lstrlenW (lpString="65617465") returned 8 [0074.432] lstrcpynW (in: lpString1=0x46b000, lpString2="65617465", iMaxLength=1024 | out: lpString1="65617465") returned="65617465" [0074.432] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.432] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.432] lstrlenW (lpString="") returned 0 [0074.432] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.433] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.433] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.433] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.433] lstrcpynW (in: lpString1=0x432ea4, lpString2="65", iMaxLength=1024 | out: lpString1="65") returned="65" [0074.433] lstrlenW (lpString="65") returned 2 [0074.433] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="e") returned 1 [0074.433] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.433] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.433] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.433] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.433] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.433] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.433] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.433] lstrcpynW (in: lpString1=0x432ea0, lpString2="e", iMaxLength=1024 | out: lpString1="e") returned="e" [0074.433] lstrlenW (lpString="e") returned 1 [0074.433] lstrcpynW (in: lpString1=0x40b5f0, lpString2="e", iMaxLength=1024 | out: lpString1="e") returned="e" [0074.433] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.433] lstrcmpiW (lpString1="e", lpString2="^") returned 1 [0074.434] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.434] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.434] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.434] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.434] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.434] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.434] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.434] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.434] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::Cr", iMaxLength=1024 | out: lpString1="KERNEL32::Cr") returned="KERNEL32::Cr" [0074.434] lstrlenW (lpString="KERNEL32::Cr") returned 12 [0074.434] lstrcpynW (in: lpString1=0x432eb8, lpString2="e", iMaxLength=1024 | out: lpString1="e") returned="e" [0074.434] lstrlenW (lpString="e") returned 1 [0074.435] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::Cre", iMaxLength=1024 | out: lpString1="KERNEL32::Cre") returned="KERNEL32::Cre" [0074.435] lstrlenW (lpString="KERNEL32::Cre") returned 13 [0074.435] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::Cre", iMaxLength=1024 | out: lpString1="KERNEL32::Cre") returned="KERNEL32::Cre" [0074.435] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.435] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.435] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.435] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.435] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.435] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.435] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.435] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.435] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.436] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.436] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.436] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.436] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.436] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.436] lstrlenW (lpString="C:\\Windows") returned 10 [0074.436] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.436] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.436] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.436] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.436] lstrlenW (lpString="524386") returned 6 [0074.436] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.436] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.437] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.437] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.437] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.437] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.437] lstrlenW (lpString="0") returned 1 [0074.437] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0074.437] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.437] lstrlenW (lpString="2") returned 1 [0074.437] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.437] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.437] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.437] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.437] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.437] lstrlenW (lpString="2") returned 1 [0074.437] lstrcpynW (in: lpString1=0x432ea0, lpString2="65617465", iMaxLength=1024 | out: lpString1="65617465") returned="65617465" [0074.437] lstrlenW (lpString="65617465") returned 8 [0074.437] lstrcpynW (in: lpString1=0x40a5f0, lpString2="65617465", iMaxLength=1024 | out: lpString1="65617465") returned="65617465" [0074.437] lstrlenW (lpString="65617465") returned 8 [0074.437] lstrcpynW (in: lpString1=0x46b000, lpString2="617465", iMaxLength=1024 | out: lpString1="617465") returned="617465" [0074.437] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.437] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.437] lstrlenW (lpString="") returned 0 [0074.437] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.438] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.438] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.438] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.438] lstrcpynW (in: lpString1=0x432ea4, lpString2="61", iMaxLength=1024 | out: lpString1="61") returned="61" [0074.438] lstrlenW (lpString="61") returned 2 [0074.438] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="a") returned 1 [0074.438] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.438] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.438] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.438] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.438] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.438] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.438] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.438] lstrcpynW (in: lpString1=0x432ea0, lpString2="a", iMaxLength=1024 | out: lpString1="a") returned="a" [0074.438] lstrlenW (lpString="a") returned 1 [0074.438] lstrcpynW (in: lpString1=0x40b5f0, lpString2="a", iMaxLength=1024 | out: lpString1="a") returned="a" [0074.438] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.438] lstrcmpiW (lpString1="a", lpString2="^") returned 1 [0074.438] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.439] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.439] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.439] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.439] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.439] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.439] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.439] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.439] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::Cre", iMaxLength=1024 | out: lpString1="KERNEL32::Cre") returned="KERNEL32::Cre" [0074.439] lstrlenW (lpString="KERNEL32::Cre") returned 13 [0074.439] lstrcpynW (in: lpString1=0x432eba, lpString2="a", iMaxLength=1024 | out: lpString1="a") returned="a" [0074.439] lstrlenW (lpString="a") returned 1 [0074.439] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::Crea", iMaxLength=1024 | out: lpString1="KERNEL32::Crea") returned="KERNEL32::Crea" [0074.439] lstrlenW (lpString="KERNEL32::Crea") returned 14 [0074.439] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::Crea", iMaxLength=1024 | out: lpString1="KERNEL32::Crea") returned="KERNEL32::Crea" [0074.439] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.440] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.440] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.440] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.440] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.440] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.440] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.440] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.440] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.440] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.440] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.441] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.441] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.441] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.441] lstrlenW (lpString="C:\\Windows") returned 10 [0074.441] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.441] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.441] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.441] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.441] lstrlenW (lpString="524386") returned 6 [0074.441] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.441] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.441] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.441] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.441] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.442] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0074.442] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.442] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.442] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.442] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.442] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.442] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="t") returned 1 [0074.442] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.442] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.442] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.442] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.442] lstrcmpiW (lpString1="t", lpString2="^") returned 1 [0074.442] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.442] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.442] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.443] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.443] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.443] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.443] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.443] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.443] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::Crea", iMaxLength=1024 | out: lpString1="KERNEL32::Crea") returned="KERNEL32::Crea" [0074.443] lstrlenW (lpString="KERNEL32::Crea") returned 14 [0074.443] lstrcpynW (in: lpString1=0x432ebc, lpString2="t", iMaxLength=1024 | out: lpString1="t") returned="t" [0074.443] lstrlenW (lpString="t") returned 1 [0074.443] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::Creat", iMaxLength=1024 | out: lpString1="KERNEL32::Creat") returned="KERNEL32::Creat" [0074.443] lstrlenW (lpString="KERNEL32::Creat") returned 15 [0074.443] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::Creat", iMaxLength=1024 | out: lpString1="KERNEL32::Creat") returned="KERNEL32::Creat" [0074.443] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.443] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.443] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.444] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.444] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.444] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.444] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.444] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.444] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.444] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.444] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.444] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.444] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.445] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.445] lstrlenW (lpString="C:\\Windows") returned 10 [0074.445] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.445] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.445] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.445] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.445] lstrlenW (lpString="524386") returned 6 [0074.445] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.445] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.445] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.445] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.445] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.445] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.445] lstrlenW (lpString="4") returned 1 [0074.445] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0074.445] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.445] lstrlenW (lpString="6") returned 1 [0074.445] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.446] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.446] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.446] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.446] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.446] lstrlenW (lpString="6") returned 1 [0074.446] lstrcpynW (in: lpString1=0x432ea0, lpString2="65617465", iMaxLength=1024 | out: lpString1="65617465") returned="65617465" [0074.446] lstrlenW (lpString="65617465") returned 8 [0074.446] lstrcpynW (in: lpString1=0x40a5f0, lpString2="65617465", iMaxLength=1024 | out: lpString1="65617465") returned="65617465" [0074.446] lstrlenW (lpString="65617465") returned 8 [0074.446] lstrcpynW (in: lpString1=0x46b000, lpString2="65", iMaxLength=1024 | out: lpString1="65") returned="65" [0074.446] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.446] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.446] lstrlenW (lpString="") returned 0 [0074.446] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.446] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.446] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.446] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.446] lstrcpynW (in: lpString1=0x432ea4, lpString2="65", iMaxLength=1024 | out: lpString1="65") returned="65" [0074.446] lstrlenW (lpString="65") returned 2 [0074.446] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="e") returned 1 [0074.446] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.446] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.446] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.447] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.447] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.447] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.447] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.447] lstrcpynW (in: lpString1=0x432ea0, lpString2="e", iMaxLength=1024 | out: lpString1="e") returned="e" [0074.447] lstrlenW (lpString="e") returned 1 [0074.447] lstrcpynW (in: lpString1=0x40b5f0, lpString2="e", iMaxLength=1024 | out: lpString1="e") returned="e" [0074.447] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.447] lstrcmpiW (lpString1="e", lpString2="^") returned 1 [0074.447] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.447] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.447] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.447] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.447] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.448] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.448] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.448] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.448] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::Creat", iMaxLength=1024 | out: lpString1="KERNEL32::Creat") returned="KERNEL32::Creat" [0074.448] lstrlenW (lpString="KERNEL32::Creat") returned 15 [0074.448] lstrcpynW (in: lpString1=0x432ebe, lpString2="e", iMaxLength=1024 | out: lpString1="e") returned="e" [0074.448] lstrlenW (lpString="e") returned 1 [0074.448] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::Create", iMaxLength=1024 | out: lpString1="KERNEL32::Create") returned="KERNEL32::Create" [0074.448] lstrlenW (lpString="KERNEL32::Create") returned 16 [0074.448] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::Create", iMaxLength=1024 | out: lpString1="KERNEL32::Create") returned="KERNEL32::Create" [0074.448] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.448] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.448] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.448] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.449] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.449] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.449] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.449] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.449] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.449] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.449] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.449] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.449] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.449] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.450] lstrlenW (lpString="C:\\Windows") returned 10 [0074.450] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.450] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.450] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.450] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.450] lstrlenW (lpString="524386") returned 6 [0074.450] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.450] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.450] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.450] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.450] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.450] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.450] lstrlenW (lpString="6") returned 1 [0074.450] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0074.450] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.450] lstrlenW (lpString="8") returned 1 [0074.450] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0074.451] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0074.451] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0074.451] lstrlenW (lpString="Execute: ") returned 9 [0074.451] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0074.451] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0074.451] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x12 [0074.451] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x12 [0074.451] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x12, lParam=0x0) returned 0x1 [0074.452] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0074.452] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0074.452] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0074.452] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0074.452] lstrcpynW (in: lpString1=0x432ea0, lpString2="24", iMaxLength=1024 | out: lpString1="24") returned="24" [0074.452] lstrlenW (lpString="24") returned 2 [0074.452] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="32") returned 2 [0074.452] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.452] lstrlenW (lpString="") returned 0 [0074.452] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.452] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.452] lstrcpynW (in: lpString1=0x432ea0, lpString2="32", iMaxLength=1024 | out: lpString1="32") returned="32" [0074.452] lstrlenW (lpString="32") returned 2 [0074.452] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0074.452] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrlenW (lpString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returned 1023 [0074.453] lstrcpynW (in: lpString1=0x46d000, lpString2="B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString1="B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0074.453] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1d0) returned 0x0 [0074.453] RegEnumValueW (in: hKey=0x1d0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0074.453] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.453] lstrcpynW (in: lpString1=0x432ea4, lpString2="B3E119F9", iMaxLength=1024 | out: lpString1="B3E119F9") returned="B3E119F9" [0074.453] lstrlenW (lpString="B3E119F9") returned 8 [0074.453] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1181314149") returned 10 [0074.453] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0074.453] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0074.453] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1d0, lpdwDisposition=0x0) returned 0x0 [0074.453] RegSetValueExW (in: hKey=0x1d0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0074.453] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.454] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0074.454] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0074.454] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0074.454] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0074.454] lstrcpynW (in: lpString1=0x432ea0, lpString2="1181314149", iMaxLength=1024 | out: lpString1="1181314149") returned="1181314149" [0074.454] lstrlenW (lpString="1181314149") returned 10 [0074.454] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="46696C65") returned 8 [0074.454] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.454] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.454] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.454] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.454] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.455] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.455] lstrlenW (lpString="0") returned 1 [0074.455] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.455] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.455] lstrlenW (lpString="0") returned 1 [0074.455] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.455] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.455] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.455] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.455] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.455] lstrlenW (lpString="0") returned 1 [0074.455] lstrcpynW (in: lpString1=0x432ea0, lpString2="46696C65", iMaxLength=1024 | out: lpString1="46696C65") returned="46696C65" [0074.455] lstrlenW (lpString="46696C65") returned 8 [0074.455] lstrcpynW (in: lpString1=0x40a5f0, lpString2="46696C65", iMaxLength=1024 | out: lpString1="46696C65") returned="46696C65" [0074.455] lstrlenW (lpString="46696C65") returned 8 [0074.455] lstrcpynW (in: lpString1=0x46b000, lpString2="46696C65", iMaxLength=1024 | out: lpString1="46696C65") returned="46696C65" [0074.455] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.455] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.455] lstrlenW (lpString="") returned 0 [0074.455] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.455] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.455] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.455] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.455] lstrcpynW (in: lpString1=0x432ea4, lpString2="46", iMaxLength=1024 | out: lpString1="46") returned="46" [0074.455] lstrlenW (lpString="46") returned 2 [0074.456] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="F") returned 1 [0074.456] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.456] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.456] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.456] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.456] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.456] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.456] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.456] lstrcpynW (in: lpString1=0x432ea0, lpString2="F", iMaxLength=1024 | out: lpString1="F") returned="F" [0074.456] lstrlenW (lpString="F") returned 1 [0074.456] lstrcpynW (in: lpString1=0x40b5f0, lpString2="F", iMaxLength=1024 | out: lpString1="F") returned="F" [0074.456] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.456] lstrcmpiW (lpString1="F", lpString2="^") returned 1 [0074.456] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.456] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.457] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.457] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.457] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.457] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.457] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.457] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.457] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::Create", iMaxLength=1024 | out: lpString1="KERNEL32::Create") returned="KERNEL32::Create" [0074.457] lstrlenW (lpString="KERNEL32::Create") returned 16 [0074.457] lstrcpynW (in: lpString1=0x432ec0, lpString2="F", iMaxLength=1024 | out: lpString1="F") returned="F" [0074.457] lstrlenW (lpString="F") returned 1 [0074.457] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateF", iMaxLength=1024 | out: lpString1="KERNEL32::CreateF") returned="KERNEL32::CreateF" [0074.457] lstrlenW (lpString="KERNEL32::CreateF") returned 17 [0074.457] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateF", iMaxLength=1024 | out: lpString1="KERNEL32::CreateF") returned="KERNEL32::CreateF" [0074.457] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.457] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.458] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.458] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.458] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.458] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.458] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.458] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.458] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.458] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.458] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.458] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.458] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.459] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.459] lstrlenW (lpString="C:\\Windows") returned 10 [0074.459] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.459] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.459] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.459] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.459] lstrlenW (lpString="524386") returned 6 [0074.459] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.459] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.459] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.459] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.459] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.459] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.459] lstrlenW (lpString="0") returned 1 [0074.459] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0074.459] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.459] lstrlenW (lpString="2") returned 1 [0074.460] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.460] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.460] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.460] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.460] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.460] lstrlenW (lpString="2") returned 1 [0074.460] lstrcpynW (in: lpString1=0x432ea0, lpString2="46696C65", iMaxLength=1024 | out: lpString1="46696C65") returned="46696C65" [0074.460] lstrlenW (lpString="46696C65") returned 8 [0074.460] lstrcpynW (in: lpString1=0x40a5f0, lpString2="46696C65", iMaxLength=1024 | out: lpString1="46696C65") returned="46696C65" [0074.460] lstrlenW (lpString="46696C65") returned 8 [0074.460] lstrcpynW (in: lpString1=0x46b000, lpString2="696C65", iMaxLength=1024 | out: lpString1="696C65") returned="696C65" [0074.460] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.460] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.460] lstrlenW (lpString="") returned 0 [0074.460] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.460] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.460] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.460] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.460] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0074.460] lstrlenW (lpString="69") returned 2 [0074.460] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0074.460] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.460] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.460] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.461] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.461] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.461] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.461] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.461] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0074.461] lstrlenW (lpString="i") returned 1 [0074.461] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0074.461] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.461] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0074.461] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.461] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.461] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.461] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.461] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.462] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.462] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.462] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.462] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateF", iMaxLength=1024 | out: lpString1="KERNEL32::CreateF") returned="KERNEL32::CreateF" [0074.462] lstrlenW (lpString="KERNEL32::CreateF") returned 17 [0074.462] lstrcpynW (in: lpString1=0x432ec2, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0074.462] lstrlenW (lpString="i") returned 1 [0074.462] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFi", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFi") returned="KERNEL32::CreateFi" [0074.462] lstrlenW (lpString="KERNEL32::CreateFi") returned 18 [0074.462] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFi", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFi") returned="KERNEL32::CreateFi" [0074.462] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.462] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.462] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.462] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.462] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.463] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.463] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.463] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.463] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.463] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.463] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.464] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.464] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.464] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.464] lstrlenW (lpString="C:\\Windows") returned 10 [0074.464] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.464] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.464] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.464] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.464] lstrlenW (lpString="524386") returned 6 [0074.464] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.464] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.464] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.464] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.464] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.464] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.464] lstrlenW (lpString="2") returned 1 [0074.465] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0074.465] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.465] lstrlenW (lpString="4") returned 1 [0074.465] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.465] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.465] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.465] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.465] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.465] lstrlenW (lpString="4") returned 1 [0074.465] lstrcpynW (in: lpString1=0x432ea0, lpString2="46696C65", iMaxLength=1024 | out: lpString1="46696C65") returned="46696C65" [0074.465] lstrlenW (lpString="46696C65") returned 8 [0074.465] lstrcpynW (in: lpString1=0x40a5f0, lpString2="46696C65", iMaxLength=1024 | out: lpString1="46696C65") returned="46696C65" [0074.465] lstrlenW (lpString="46696C65") returned 8 [0074.465] lstrcpynW (in: lpString1=0x46b000, lpString2="6C65", iMaxLength=1024 | out: lpString1="6C65") returned="6C65" [0074.465] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.465] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.465] lstrlenW (lpString="") returned 0 [0074.465] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.465] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.465] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.465] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.465] lstrcpynW (in: lpString1=0x432ea4, lpString2="6C", iMaxLength=1024 | out: lpString1="6C") returned="6C" [0074.465] lstrlenW (lpString="6C") returned 2 [0074.465] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="l") returned 1 [0074.465] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.466] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.466] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.466] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.466] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.466] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.466] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.466] lstrcpynW (in: lpString1=0x432ea0, lpString2="l", iMaxLength=1024 | out: lpString1="l") returned="l" [0074.466] lstrlenW (lpString="l") returned 1 [0074.466] lstrcpynW (in: lpString1=0x40b5f0, lpString2="l", iMaxLength=1024 | out: lpString1="l") returned="l" [0074.466] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.466] lstrcmpiW (lpString1="l", lpString2="^") returned 1 [0074.466] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.466] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.466] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.466] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.467] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.467] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.467] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.467] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.467] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFi", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFi") returned="KERNEL32::CreateFi" [0074.467] lstrlenW (lpString="KERNEL32::CreateFi") returned 18 [0074.467] lstrcpynW (in: lpString1=0x432ec4, lpString2="l", iMaxLength=1024 | out: lpString1="l") returned="l" [0074.467] lstrlenW (lpString="l") returned 1 [0074.467] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFil", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFil") returned="KERNEL32::CreateFil" [0074.467] lstrlenW (lpString="KERNEL32::CreateFil") returned 19 [0074.467] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFil", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFil") returned="KERNEL32::CreateFil" [0074.467] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.467] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.467] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.467] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.468] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.468] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.468] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.468] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.468] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.468] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.468] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.468] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.468] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.468] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.469] lstrlenW (lpString="C:\\Windows") returned 10 [0074.469] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.469] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.469] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.469] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.469] lstrlenW (lpString="524386") returned 6 [0074.469] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.469] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.469] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.469] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.469] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.469] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.469] lstrlenW (lpString="4") returned 1 [0074.469] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0074.469] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.469] lstrlenW (lpString="6") returned 1 [0074.469] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.469] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.469] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.469] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.470] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.470] lstrlenW (lpString="6") returned 1 [0074.470] lstrcpynW (in: lpString1=0x432ea0, lpString2="46696C65", iMaxLength=1024 | out: lpString1="46696C65") returned="46696C65" [0074.470] lstrlenW (lpString="46696C65") returned 8 [0074.470] lstrcpynW (in: lpString1=0x40a5f0, lpString2="46696C65", iMaxLength=1024 | out: lpString1="46696C65") returned="46696C65" [0074.470] lstrlenW (lpString="46696C65") returned 8 [0074.470] lstrcpynW (in: lpString1=0x46b000, lpString2="65", iMaxLength=1024 | out: lpString1="65") returned="65" [0074.470] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.470] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.470] lstrlenW (lpString="") returned 0 [0074.470] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.470] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.470] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.470] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.470] lstrcpynW (in: lpString1=0x432ea4, lpString2="65", iMaxLength=1024 | out: lpString1="65") returned="65" [0074.470] lstrlenW (lpString="65") returned 2 [0074.470] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="e") returned 1 [0074.470] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.470] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.470] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.470] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.471] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.471] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.471] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.471] lstrcpynW (in: lpString1=0x432ea0, lpString2="e", iMaxLength=1024 | out: lpString1="e") returned="e" [0074.471] lstrlenW (lpString="e") returned 1 [0074.471] lstrcpynW (in: lpString1=0x40b5f0, lpString2="e", iMaxLength=1024 | out: lpString1="e") returned="e" [0074.471] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.471] lstrcmpiW (lpString1="e", lpString2="^") returned 1 [0074.471] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.471] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.471] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.471] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.471] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.471] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.472] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.472] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.472] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFil", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFil") returned="KERNEL32::CreateFil" [0074.472] lstrlenW (lpString="KERNEL32::CreateFil") returned 19 [0074.472] lstrcpynW (in: lpString1=0x432ec6, lpString2="e", iMaxLength=1024 | out: lpString1="e") returned="e" [0074.472] lstrlenW (lpString="e") returned 1 [0074.472] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFile", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFile") returned="KERNEL32::CreateFile" [0074.472] lstrlenW (lpString="KERNEL32::CreateFile") returned 20 [0074.472] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFile", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFile") returned="KERNEL32::CreateFile" [0074.472] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.472] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.472] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.472] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.472] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.472] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.472] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.472] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.473] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.473] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.473] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.473] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.473] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.473] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.473] lstrlenW (lpString="C:\\Windows") returned 10 [0074.473] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.473] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.473] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.473] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.474] lstrlenW (lpString="524386") returned 6 [0074.474] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.474] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.474] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.474] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.474] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.474] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.474] lstrlenW (lpString="6") returned 1 [0074.474] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0074.474] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.474] lstrlenW (lpString="8") returned 1 [0074.474] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0074.474] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0074.474] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0074.474] lstrlenW (lpString="Execute: ") returned 9 [0074.474] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0074.474] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0074.474] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x13 [0074.475] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x13 [0074.475] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x13, lParam=0x0) returned 0x1 [0074.475] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0074.475] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0074.475] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0074.475] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0074.475] lstrcpynW (in: lpString1=0x432ea0, lpString2="32", iMaxLength=1024 | out: lpString1="32") returned="32" [0074.476] lstrlenW (lpString="32") returned 2 [0074.476] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="40") returned 2 [0074.476] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.476] lstrlenW (lpString="") returned 0 [0074.476] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.476] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.476] lstrcpynW (in: lpString1=0x432ea0, lpString2="40", iMaxLength=1024 | out: lpString1="40") returned="40" [0074.476] lstrlenW (lpString="40") returned 2 [0074.476] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrlenW (lpString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returned 1023 [0074.476] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned 1023 [0074.476] lstrcpynW (in: lpString1=0x46d000, lpString2="B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0074.476] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1d0) returned 0x0 [0074.476] RegEnumValueW (in: hKey=0x1d0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0074.476] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.476] lstrcpynW (in: lpString1=0x432ea4, lpString2="B4A018BC", iMaxLength=1024 | out: lpString1="B4A018BC") returned="B4A018BC" [0074.476] lstrlenW (lpString="B4A018BC") returned 8 [0074.476] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1093168416") returned 10 [0074.477] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0074.477] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0074.477] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1d0, lpdwDisposition=0x0) returned 0x0 [0074.477] RegSetValueExW (in: hKey=0x1d0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0074.477] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.477] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0074.477] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0074.477] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0074.477] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0074.477] lstrcpynW (in: lpString1=0x432ea0, lpString2="1093168416", iMaxLength=1024 | out: lpString1="1093168416") returned="1093168416" [0074.477] lstrlenW (lpString="1093168416") returned 10 [0074.477] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="41286D20") returned 8 [0074.477] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.478] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.478] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.478] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.478] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.478] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.478] lstrlenW (lpString="0") returned 1 [0074.478] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.478] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.478] lstrlenW (lpString="0") returned 1 [0074.478] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.480] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.480] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.480] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.480] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.480] lstrlenW (lpString="0") returned 1 [0074.480] lstrcpynW (in: lpString1=0x432ea0, lpString2="41286D20", iMaxLength=1024 | out: lpString1="41286D20") returned="41286D20" [0074.480] lstrlenW (lpString="41286D20") returned 8 [0074.480] lstrcpynW (in: lpString1=0x40a5f0, lpString2="41286D20", iMaxLength=1024 | out: lpString1="41286D20") returned="41286D20" [0074.480] lstrlenW (lpString="41286D20") returned 8 [0074.480] lstrcpynW (in: lpString1=0x46b000, lpString2="41286D20", iMaxLength=1024 | out: lpString1="41286D20") returned="41286D20" [0074.480] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.480] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.480] lstrlenW (lpString="") returned 0 [0074.480] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.481] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.481] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.481] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.481] lstrcpynW (in: lpString1=0x432ea4, lpString2="41", iMaxLength=1024 | out: lpString1="41") returned="41" [0074.481] lstrlenW (lpString="41") returned 2 [0074.481] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="A") returned 1 [0074.481] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.481] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.481] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.481] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.481] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.481] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.481] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.481] lstrcpynW (in: lpString1=0x432ea0, lpString2="A", iMaxLength=1024 | out: lpString1="A") returned="A" [0074.481] lstrlenW (lpString="A") returned 1 [0074.481] lstrcpynW (in: lpString1=0x40b5f0, lpString2="A", iMaxLength=1024 | out: lpString1="A") returned="A" [0074.481] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.481] lstrcmpiW (lpString1="A", lpString2="^") returned 1 [0074.481] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.482] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.482] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.482] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.482] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.482] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.482] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.482] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.482] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFile", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFile") returned="KERNEL32::CreateFile" [0074.482] lstrlenW (lpString="KERNEL32::CreateFile") returned 20 [0074.482] lstrcpynW (in: lpString1=0x432ec8, lpString2="A", iMaxLength=1024 | out: lpString1="A") returned="A" [0074.482] lstrlenW (lpString="A") returned 1 [0074.482] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA") returned="KERNEL32::CreateFileA" [0074.482] lstrlenW (lpString="KERNEL32::CreateFileA") returned 21 [0074.482] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA") returned="KERNEL32::CreateFileA" [0074.483] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.483] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.483] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.483] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.483] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.483] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.483] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.483] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.483] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.483] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.484] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.484] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.484] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.484] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.484] lstrlenW (lpString="C:\\Windows") returned 10 [0074.484] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.484] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.484] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.484] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.484] lstrlenW (lpString="524386") returned 6 [0074.484] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.484] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.484] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.484] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.484] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.485] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.485] lstrlenW (lpString="0") returned 1 [0074.485] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0074.485] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.485] lstrlenW (lpString="2") returned 1 [0074.485] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.485] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.485] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.485] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.485] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.485] lstrlenW (lpString="2") returned 1 [0074.485] lstrcpynW (in: lpString1=0x432ea0, lpString2="41286D20", iMaxLength=1024 | out: lpString1="41286D20") returned="41286D20" [0074.485] lstrlenW (lpString="41286D20") returned 8 [0074.485] lstrcpynW (in: lpString1=0x40a5f0, lpString2="41286D20", iMaxLength=1024 | out: lpString1="41286D20") returned="41286D20" [0074.485] lstrlenW (lpString="41286D20") returned 8 [0074.485] lstrcpynW (in: lpString1=0x46b000, lpString2="286D20", iMaxLength=1024 | out: lpString1="286D20") returned="286D20" [0074.485] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.485] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.485] lstrlenW (lpString="") returned 0 [0074.485] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.485] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.485] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.485] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.485] lstrcpynW (in: lpString1=0x432ea4, lpString2="28", iMaxLength=1024 | out: lpString1="28") returned="28" [0074.485] lstrlenW (lpString="28") returned 2 [0074.485] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="(") returned 1 [0074.486] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.486] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.486] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.486] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.486] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.486] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.486] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.486] lstrcpynW (in: lpString1=0x432ea0, lpString2="(", iMaxLength=1024 | out: lpString1="(") returned="(" [0074.486] lstrlenW (lpString="(") returned 1 [0074.486] lstrcpynW (in: lpString1=0x40b5f0, lpString2="(", iMaxLength=1024 | out: lpString1="(") returned="(" [0074.486] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.486] lstrcmpiW (lpString1="(", lpString2="^") returned -1 [0074.486] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.486] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.486] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.487] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.487] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.487] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.487] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.487] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.487] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.487] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.487] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.487] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.487] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.488] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.488] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.488] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.488] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.488] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.488] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.488] lstrlenW (lpString="C:\\Windows") returned 10 [0074.488] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.488] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.488] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.489] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.489] lstrlenW (lpString="524386") returned 6 [0074.489] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.489] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.489] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.489] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.489] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.489] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.489] lstrlenW (lpString="2") returned 1 [0074.489] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0074.489] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.489] lstrlenW (lpString="4") returned 1 [0074.489] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.489] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.489] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.489] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.489] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.489] lstrlenW (lpString="4") returned 1 [0074.489] lstrcpynW (in: lpString1=0x432ea0, lpString2="41286D20", iMaxLength=1024 | out: lpString1="41286D20") returned="41286D20" [0074.489] lstrlenW (lpString="41286D20") returned 8 [0074.489] lstrcpynW (in: lpString1=0x40a5f0, lpString2="41286D20", iMaxLength=1024 | out: lpString1="41286D20") returned="41286D20" [0074.489] lstrlenW (lpString="41286D20") returned 8 [0074.489] lstrcpynW (in: lpString1=0x46b000, lpString2="6D20", iMaxLength=1024 | out: lpString1="6D20") returned="6D20" [0074.489] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.489] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.490] lstrlenW (lpString="") returned 0 [0074.490] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.490] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.490] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.490] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.490] lstrcpynW (in: lpString1=0x432ea4, lpString2="6D", iMaxLength=1024 | out: lpString1="6D") returned="6D" [0074.490] lstrlenW (lpString="6D") returned 2 [0074.490] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="m") returned 1 [0074.490] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.490] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.490] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.490] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.490] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.490] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.490] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.490] lstrcpynW (in: lpString1=0x432ea0, lpString2="m", iMaxLength=1024 | out: lpString1="m") returned="m" [0074.490] lstrlenW (lpString="m") returned 1 [0074.490] lstrcpynW (in: lpString1=0x40b5f0, lpString2="m", iMaxLength=1024 | out: lpString1="m") returned="m" [0074.490] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.490] lstrcmpiW (lpString1="m", lpString2="^") returned 1 [0074.491] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.491] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.491] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.491] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.491] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.491] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.491] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.491] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.491] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(") returned="KERNEL32::CreateFileA(" [0074.491] lstrlenW (lpString="KERNEL32::CreateFileA(") returned 22 [0074.491] lstrcpynW (in: lpString1=0x432ecc, lpString2="m", iMaxLength=1024 | out: lpString1="m") returned="m" [0074.491] lstrlenW (lpString="m") returned 1 [0074.491] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m") returned="KERNEL32::CreateFileA(m" [0074.491] lstrlenW (lpString="KERNEL32::CreateFileA(m") returned 23 [0074.492] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m") returned="KERNEL32::CreateFileA(m" [0074.492] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.492] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.492] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.492] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.492] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.492] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.492] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.492] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.492] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.492] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.493] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.493] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.493] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.493] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.493] lstrlenW (lpString="C:\\Windows") returned 10 [0074.493] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.493] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.493] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.493] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.493] lstrlenW (lpString="524386") returned 6 [0074.493] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.493] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.493] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.493] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.494] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.494] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.494] lstrlenW (lpString="4") returned 1 [0074.494] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0074.494] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.494] lstrlenW (lpString="6") returned 1 [0074.500] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.500] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.500] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.500] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.500] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.500] lstrlenW (lpString="6") returned 1 [0074.500] lstrcpynW (in: lpString1=0x432ea0, lpString2="41286D20", iMaxLength=1024 | out: lpString1="41286D20") returned="41286D20" [0074.500] lstrlenW (lpString="41286D20") returned 8 [0074.500] lstrcpynW (in: lpString1=0x40a5f0, lpString2="41286D20", iMaxLength=1024 | out: lpString1="41286D20") returned="41286D20" [0074.500] lstrlenW (lpString="41286D20") returned 8 [0074.500] lstrcpynW (in: lpString1=0x46b000, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0074.500] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.500] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.500] lstrlenW (lpString="") returned 0 [0074.500] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.500] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.501] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.501] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.501] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0074.501] lstrlenW (lpString="20") returned 2 [0074.501] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0074.501] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.501] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.501] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.501] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.501] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.501] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.501] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.501] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.501] lstrlenW (lpString=" ") returned 1 [0074.501] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.501] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.501] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0074.501] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.502] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.502] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.502] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.502] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.502] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.502] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.502] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.502] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m") returned="KERNEL32::CreateFileA(m" [0074.502] lstrlenW (lpString="KERNEL32::CreateFileA(m") returned 23 [0074.502] lstrcpynW (in: lpString1=0x432ece, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.502] lstrlenW (lpString=" ") returned 1 [0074.502] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m ") returned="KERNEL32::CreateFileA(m " [0074.502] lstrlenW (lpString="KERNEL32::CreateFileA(m ") returned 24 [0074.502] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m ") returned="KERNEL32::CreateFileA(m " [0074.502] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.503] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.503] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.503] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.503] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.503] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.503] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.503] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.503] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.503] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.503] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.504] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.504] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.504] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.504] lstrlenW (lpString="C:\\Windows") returned 10 [0074.504] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.504] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.504] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.504] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.504] lstrlenW (lpString="524386") returned 6 [0074.504] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.504] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.504] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.504] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.504] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.504] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.504] lstrlenW (lpString="6") returned 1 [0074.505] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0074.505] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.505] lstrlenW (lpString="8") returned 1 [0074.505] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0074.505] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0074.505] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0074.505] lstrlenW (lpString="Execute: ") returned 9 [0074.505] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0074.505] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0074.505] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x14 [0074.505] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x14 [0074.505] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x14, lParam=0x0) returned 0x1 [0074.506] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0074.506] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0074.506] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0074.506] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0074.506] lstrcpynW (in: lpString1=0x432ea0, lpString2="40", iMaxLength=1024 | out: lpString1="40") returned="40" [0074.506] lstrlenW (lpString="40") returned 2 [0074.506] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="48") returned 2 [0074.506] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.506] lstrlenW (lpString="") returned 0 [0074.506] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.506] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.506] lstrcpynW (in: lpString1=0x432ea0, lpString2="48", iMaxLength=1024 | out: lpString1="48") returned="48" [0074.506] lstrlenW (lpString="48") returned 2 [0074.506] lstrcpynW (in: lpString1=0x432ea0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned 1023 [0074.506] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrlenW (lpString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returned 1023 [0074.507] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0074.507] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1d0) returned 0x0 [0074.507] RegEnumValueW (in: hKey=0x1d0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0074.507] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.507] lstrcpynW (in: lpString1=0x432ea4, lpString2="87BC55B0", iMaxLength=1024 | out: lpString1="87BC55B0") returned="87BC55B0" [0074.507] lstrlenW (lpString="87BC55B0") returned 8 [0074.507] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1916018732") returned 10 [0074.507] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0074.507] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0074.507] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1d0, lpdwDisposition=0x0) returned 0x0 [0074.507] RegSetValueExW (in: hKey=0x1d0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0074.507] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.507] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0074.507] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0074.508] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0074.508] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0074.508] lstrcpynW (in: lpString1=0x432ea0, lpString2="1916018732", iMaxLength=1024 | out: lpString1="1916018732") returned="1916018732" [0074.508] lstrlenW (lpString="1916018732") returned 10 [0074.508] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="7234202C") returned 8 [0074.508] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.508] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.508] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.509] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.509] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.509] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.509] lstrlenW (lpString="0") returned 1 [0074.509] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.509] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.509] lstrlenW (lpString="0") returned 1 [0074.509] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.509] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.509] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.510] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.510] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.510] lstrlenW (lpString="0") returned 1 [0074.510] lstrcpynW (in: lpString1=0x432ea0, lpString2="7234202C", iMaxLength=1024 | out: lpString1="7234202C") returned="7234202C" [0074.510] lstrlenW (lpString="7234202C") returned 8 [0074.510] lstrcpynW (in: lpString1=0x40a5f0, lpString2="7234202C", iMaxLength=1024 | out: lpString1="7234202C") returned="7234202C" [0074.510] lstrlenW (lpString="7234202C") returned 8 [0074.510] lstrcpynW (in: lpString1=0x46b000, lpString2="7234202C", iMaxLength=1024 | out: lpString1="7234202C") returned="7234202C" [0074.510] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.510] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.510] lstrlenW (lpString="") returned 0 [0074.511] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.511] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.511] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.511] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.511] lstrcpynW (in: lpString1=0x432ea4, lpString2="72", iMaxLength=1024 | out: lpString1="72") returned="72" [0074.511] lstrlenW (lpString="72") returned 2 [0074.511] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="r") returned 1 [0074.511] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.511] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.511] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.511] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.511] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.511] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.511] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.511] lstrcpynW (in: lpString1=0x432ea0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0074.511] lstrlenW (lpString="r") returned 1 [0074.512] lstrcpynW (in: lpString1=0x40b5f0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0074.512] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.512] lstrcmpiW (lpString1="r", lpString2="^") returned 1 [0074.512] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.512] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.512] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.512] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.512] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.512] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.513] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.513] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.513] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m ") returned="KERNEL32::CreateFileA(m " [0074.513] lstrlenW (lpString="KERNEL32::CreateFileA(m ") returned 24 [0074.513] lstrcpynW (in: lpString1=0x432ed0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0074.513] lstrlenW (lpString="r") returned 1 [0074.513] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r") returned="KERNEL32::CreateFileA(m r" [0074.513] lstrlenW (lpString="KERNEL32::CreateFileA(m r") returned 25 [0074.513] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r") returned="KERNEL32::CreateFileA(m r" [0074.513] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.513] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.513] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.513] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.513] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.513] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.514] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.514] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.514] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.514] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.514] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.514] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.514] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.514] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.514] lstrlenW (lpString="C:\\Windows") returned 10 [0074.514] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.515] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.515] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.515] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.515] lstrlenW (lpString="524386") returned 6 [0074.515] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.515] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.515] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.515] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.515] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.515] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.515] lstrlenW (lpString="0") returned 1 [0074.515] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0074.515] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.515] lstrlenW (lpString="2") returned 1 [0074.515] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.515] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.515] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.515] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.515] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.515] lstrlenW (lpString="2") returned 1 [0074.515] lstrcpynW (in: lpString1=0x432ea0, lpString2="7234202C", iMaxLength=1024 | out: lpString1="7234202C") returned="7234202C" [0074.516] lstrlenW (lpString="7234202C") returned 8 [0074.516] lstrcpynW (in: lpString1=0x40a5f0, lpString2="7234202C", iMaxLength=1024 | out: lpString1="7234202C") returned="7234202C" [0074.516] lstrlenW (lpString="7234202C") returned 8 [0074.516] lstrcpynW (in: lpString1=0x46b000, lpString2="34202C", iMaxLength=1024 | out: lpString1="34202C") returned="34202C" [0074.516] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.516] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.516] lstrlenW (lpString="") returned 0 [0074.516] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.516] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.516] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.516] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.516] lstrcpynW (in: lpString1=0x432ea4, lpString2="34", iMaxLength=1024 | out: lpString1="34") returned="34" [0074.516] lstrlenW (lpString="34") returned 2 [0074.516] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="4") returned 1 [0074.516] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.516] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.516] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.516] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.517] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.517] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.517] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.517] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.517] lstrlenW (lpString="4") returned 1 [0074.517] lstrcpynW (in: lpString1=0x40b5f0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.517] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.517] lstrcmpiW (lpString1="4", lpString2="^") returned 1 [0074.517] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.517] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.517] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.517] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.517] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.517] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.518] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.518] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.518] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r") returned="KERNEL32::CreateFileA(m r" [0074.518] lstrlenW (lpString="KERNEL32::CreateFileA(m r") returned 25 [0074.518] lstrcpynW (in: lpString1=0x432ed2, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.518] lstrlenW (lpString="4") returned 1 [0074.518] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4") returned="KERNEL32::CreateFileA(m r4" [0074.518] lstrlenW (lpString="KERNEL32::CreateFileA(m r4") returned 26 [0074.518] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4") returned="KERNEL32::CreateFileA(m r4" [0074.518] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.518] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.518] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.518] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.518] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.519] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.519] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.519] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.519] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.519] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.519] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.519] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.519] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.520] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.520] lstrlenW (lpString="C:\\Windows") returned 10 [0074.520] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.520] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.520] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.520] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.520] lstrlenW (lpString="524386") returned 6 [0074.520] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.520] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.520] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.520] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.520] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.520] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.520] lstrlenW (lpString="2") returned 1 [0074.520] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0074.520] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.520] lstrlenW (lpString="4") returned 1 [0074.520] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.520] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.521] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.521] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.521] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.521] lstrlenW (lpString="4") returned 1 [0074.521] lstrcpynW (in: lpString1=0x432ea0, lpString2="7234202C", iMaxLength=1024 | out: lpString1="7234202C") returned="7234202C" [0074.521] lstrlenW (lpString="7234202C") returned 8 [0074.521] lstrcpynW (in: lpString1=0x40a5f0, lpString2="7234202C", iMaxLength=1024 | out: lpString1="7234202C") returned="7234202C" [0074.521] lstrlenW (lpString="7234202C") returned 8 [0074.521] lstrcpynW (in: lpString1=0x46b000, lpString2="202C", iMaxLength=1024 | out: lpString1="202C") returned="202C" [0074.521] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.521] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.521] lstrlenW (lpString="") returned 0 [0074.521] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.521] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.521] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.521] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.521] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0074.521] lstrlenW (lpString="20") returned 2 [0074.521] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0074.521] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.521] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.521] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.521] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.522] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.522] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.522] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.522] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.522] lstrlenW (lpString=" ") returned 1 [0074.522] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.522] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.522] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0074.522] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.522] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.522] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.522] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.522] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.522] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.523] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.523] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.523] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4") returned="KERNEL32::CreateFileA(m r4" [0074.523] lstrlenW (lpString="KERNEL32::CreateFileA(m r4") returned 26 [0074.523] lstrcpynW (in: lpString1=0x432ed4, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.523] lstrlenW (lpString=" ") returned 1 [0074.523] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 ") returned="KERNEL32::CreateFileA(m r4 " [0074.523] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 ") returned 27 [0074.523] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 ") returned="KERNEL32::CreateFileA(m r4 " [0074.523] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.523] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.523] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.523] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.523] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.523] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.523] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.523] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.524] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.524] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.524] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.524] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.524] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.524] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.524] lstrlenW (lpString="C:\\Windows") returned 10 [0074.524] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.524] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.524] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.525] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.525] lstrlenW (lpString="524386") returned 6 [0074.525] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.525] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.525] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.525] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.525] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.525] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.525] lstrlenW (lpString="4") returned 1 [0074.525] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0074.525] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.525] lstrlenW (lpString="6") returned 1 [0074.525] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.525] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.525] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.525] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.526] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.526] lstrlenW (lpString="6") returned 1 [0074.526] lstrcpynW (in: lpString1=0x432ea0, lpString2="7234202C", iMaxLength=1024 | out: lpString1="7234202C") returned="7234202C" [0074.526] lstrlenW (lpString="7234202C") returned 8 [0074.526] lstrcpynW (in: lpString1=0x40a5f0, lpString2="7234202C", iMaxLength=1024 | out: lpString1="7234202C") returned="7234202C" [0074.526] lstrlenW (lpString="7234202C") returned 8 [0074.526] lstrcpynW (in: lpString1=0x46b000, lpString2="2C", iMaxLength=1024 | out: lpString1="2C") returned="2C" [0074.526] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.526] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.526] lstrlenW (lpString="") returned 0 [0074.526] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.526] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.526] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.526] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.526] lstrcpynW (in: lpString1=0x432ea4, lpString2="2C", iMaxLength=1024 | out: lpString1="2C") returned="2C" [0074.526] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=",") returned 1 [0074.526] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.526] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.526] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.526] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.526] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.526] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.527] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.527] lstrcpynW (in: lpString1=0x432ea0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0074.527] lstrcpynW (in: lpString1=0x40b5f0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0074.527] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.527] lstrcmpiW (lpString1=",", lpString2="^") returned -1 [0074.527] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.527] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.527] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.527] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.527] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.527] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.527] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.527] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.527] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 ") returned="KERNEL32::CreateFileA(m r4 " [0074.528] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 ") returned 27 [0074.528] lstrcpynW (in: lpString1=0x432ed6, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0074.528] lstrlenW (lpString=",") returned 1 [0074.528] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 ,", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 ,") returned="KERNEL32::CreateFileA(m r4 ," [0074.528] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 ,") returned 28 [0074.528] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 ,", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 ,") returned="KERNEL32::CreateFileA(m r4 ," [0074.528] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.528] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.528] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.528] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.528] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.528] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.528] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.528] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.529] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.529] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.529] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.529] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.529] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.529] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.529] lstrlenW (lpString="C:\\Windows") returned 10 [0074.529] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.529] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.529] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.529] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.529] lstrlenW (lpString="524386") returned 6 [0074.529] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.529] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.530] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.530] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.530] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.530] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.530] lstrlenW (lpString="6") returned 1 [0074.530] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0074.530] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.530] lstrlenW (lpString="8") returned 1 [0074.530] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0074.530] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0074.530] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0074.530] lstrlenW (lpString="Execute: ") returned 9 [0074.530] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0074.530] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0074.530] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x15 [0074.530] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x15 [0074.531] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x15, lParam=0x0) returned 0x1 [0074.531] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0074.531] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0074.531] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0074.531] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0074.531] lstrcpynW (in: lpString1=0x432ea0, lpString2="48", iMaxLength=1024 | out: lpString1="48") returned="48" [0074.531] lstrlenW (lpString="48") returned 2 [0074.531] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="56") returned 2 [0074.531] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.531] lstrlenW (lpString="") returned 0 [0074.531] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.531] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.531] lstrcpynW (in: lpString1=0x432ea0, lpString2="56", iMaxLength=1024 | out: lpString1="56") returned="56" [0074.532] lstrlenW (lpString="56") returned 2 [0074.532] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0074.532] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0074.532] lstrlenW (lpString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returned 1023 [0074.532] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0074.532] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1d0) returned 0x0 [0074.532] RegEnumValueW (in: hKey=0x1d0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0074.532] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.532] lstrcpynW (in: lpString1=0x432ea4, lpString2="D5E155AC", iMaxLength=1024 | out: lpString1="D5E155AC") returned="D5E155AC" [0074.532] lstrlenW (lpString="D5E155AC") returned 8 [0074.532] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="543760432") returned 9 [0074.532] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0074.532] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0074.532] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1d0, lpdwDisposition=0x0) returned 0x0 [0074.533] RegSetValueExW (in: hKey=0x1d0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0074.533] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.533] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0074.533] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0074.533] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0074.533] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0074.533] lstrcpynW (in: lpString1=0x432ea0, lpString2="543760432", iMaxLength=1024 | out: lpString1="543760432") returned="543760432" [0074.533] lstrlenW (lpString="543760432") returned 9 [0074.533] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="20692030") returned 8 [0074.533] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.533] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.533] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.534] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.534] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.534] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.534] lstrlenW (lpString="0") returned 1 [0074.534] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.534] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.534] lstrlenW (lpString="0") returned 1 [0074.534] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.534] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.534] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.534] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.534] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.534] lstrlenW (lpString="0") returned 1 [0074.534] lstrcpynW (in: lpString1=0x432ea0, lpString2="20692030", iMaxLength=1024 | out: lpString1="20692030") returned="20692030" [0074.534] lstrlenW (lpString="20692030") returned 8 [0074.534] lstrcpynW (in: lpString1=0x40a5f0, lpString2="20692030", iMaxLength=1024 | out: lpString1="20692030") returned="20692030" [0074.534] lstrlenW (lpString="20692030") returned 8 [0074.534] lstrcpynW (in: lpString1=0x46b000, lpString2="20692030", iMaxLength=1024 | out: lpString1="20692030") returned="20692030" [0074.534] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.534] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.534] lstrlenW (lpString="") returned 0 [0074.534] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.534] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.534] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.535] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.535] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0074.535] lstrlenW (lpString="20") returned 2 [0074.535] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0074.535] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.535] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.535] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.535] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.535] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.535] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.535] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.535] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.535] lstrlenW (lpString=" ") returned 1 [0074.535] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.535] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.535] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0074.535] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.535] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.536] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.536] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.536] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.536] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.536] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.536] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.536] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 ,", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 ,") returned="KERNEL32::CreateFileA(m r4 ," [0074.536] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 ,") returned 28 [0074.536] lstrcpynW (in: lpString1=0x432ed8, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.536] lstrlenW (lpString=" ") returned 1 [0074.536] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , ") returned="KERNEL32::CreateFileA(m r4 , " [0074.536] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , ") returned 29 [0074.536] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , ") returned="KERNEL32::CreateFileA(m r4 , " [0074.536] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.536] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.536] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.537] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.537] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.537] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.537] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.537] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.537] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.537] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.537] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.537] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.537] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.538] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.538] lstrlenW (lpString="C:\\Windows") returned 10 [0074.538] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.538] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.538] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.538] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.538] lstrlenW (lpString="524386") returned 6 [0074.538] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.538] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.538] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.538] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.538] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.538] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0074.538] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.538] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.538] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.538] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.538] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.539] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0074.539] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.539] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.539] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.539] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.539] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0074.539] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.539] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.539] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.539] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.539] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.539] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.540] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.540] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.540] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , ") returned="KERNEL32::CreateFileA(m r4 , " [0074.540] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , ") returned 29 [0074.540] lstrcpynW (in: lpString1=0x432eda, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0074.540] lstrlenW (lpString="i") returned 1 [0074.540] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i") returned="KERNEL32::CreateFileA(m r4 , i" [0074.540] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i") returned 30 [0074.540] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i") returned="KERNEL32::CreateFileA(m r4 , i" [0074.540] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.540] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.540] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.540] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.540] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.540] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.541] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.541] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.541] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.541] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.541] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.541] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.541] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.541] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.541] lstrlenW (lpString="C:\\Windows") returned 10 [0074.541] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.541] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.542] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.542] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.542] lstrlenW (lpString="524386") returned 6 [0074.542] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.542] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.542] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.542] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.542] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.542] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.542] lstrlenW (lpString="2") returned 1 [0074.542] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0074.542] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.542] lstrlenW (lpString="4") returned 1 [0074.542] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.542] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.542] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.542] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.542] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.542] lstrlenW (lpString="4") returned 1 [0074.542] lstrcpynW (in: lpString1=0x432ea0, lpString2="20692030", iMaxLength=1024 | out: lpString1="20692030") returned="20692030" [0074.542] lstrlenW (lpString="20692030") returned 8 [0074.542] lstrcpynW (in: lpString1=0x40a5f0, lpString2="20692030", iMaxLength=1024 | out: lpString1="20692030") returned="20692030" [0074.542] lstrlenW (lpString="20692030") returned 8 [0074.542] lstrcpynW (in: lpString1=0x46b000, lpString2="2030", iMaxLength=1024 | out: lpString1="2030") returned="2030" [0074.542] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.543] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.543] lstrlenW (lpString="") returned 0 [0074.543] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.543] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.543] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.543] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.543] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0074.543] lstrlenW (lpString="20") returned 2 [0074.543] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0074.543] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.543] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.543] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.543] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.543] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.543] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.543] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.543] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.543] lstrlenW (lpString=" ") returned 1 [0074.543] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.543] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.543] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0074.543] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.544] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.544] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.544] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.544] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.544] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.544] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.544] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.544] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i") returned="KERNEL32::CreateFileA(m r4 , i" [0074.544] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i") returned 30 [0074.544] lstrcpynW (in: lpString1=0x432edc, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.544] lstrlenW (lpString=" ") returned 1 [0074.544] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i ") returned="KERNEL32::CreateFileA(m r4 , i " [0074.544] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i ") returned 31 [0074.544] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i ") returned="KERNEL32::CreateFileA(m r4 , i " [0074.544] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.545] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.545] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.545] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.545] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.545] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.545] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.545] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.545] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.545] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.545] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.546] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.546] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.546] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.546] lstrlenW (lpString="C:\\Windows") returned 10 [0074.546] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.546] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.546] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.546] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.546] lstrlenW (lpString="524386") returned 6 [0074.546] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.546] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.546] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.546] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.546] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.546] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.546] lstrlenW (lpString="4") returned 1 [0074.546] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0074.546] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.547] lstrlenW (lpString="6") returned 1 [0074.547] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.547] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.547] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.547] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.547] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.547] lstrlenW (lpString="6") returned 1 [0074.547] lstrcpynW (in: lpString1=0x432ea0, lpString2="20692030", iMaxLength=1024 | out: lpString1="20692030") returned="20692030" [0074.547] lstrlenW (lpString="20692030") returned 8 [0074.547] lstrcpynW (in: lpString1=0x40a5f0, lpString2="20692030", iMaxLength=1024 | out: lpString1="20692030") returned="20692030" [0074.547] lstrlenW (lpString="20692030") returned 8 [0074.547] lstrcpynW (in: lpString1=0x46b000, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0074.547] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.547] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.547] lstrlenW (lpString="") returned 0 [0074.547] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.547] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.547] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.547] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.547] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0074.547] lstrlenW (lpString="30") returned 2 [0074.547] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0074.547] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.547] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.547] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.547] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.548] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.548] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.548] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.548] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.548] lstrlenW (lpString="0") returned 1 [0074.548] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.548] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.548] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0074.548] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.548] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.548] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.548] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.548] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.548] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.549] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.549] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.549] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i ") returned="KERNEL32::CreateFileA(m r4 , i " [0074.549] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i ") returned 31 [0074.549] lstrcpynW (in: lpString1=0x432ede, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.549] lstrlenW (lpString="0") returned 1 [0074.549] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0") returned="KERNEL32::CreateFileA(m r4 , i 0" [0074.549] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0") returned 32 [0074.549] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0") returned="KERNEL32::CreateFileA(m r4 , i 0" [0074.549] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.549] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.549] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.549] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.549] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.549] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.549] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.549] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.550] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.550] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.550] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.550] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.550] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.550] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.550] lstrlenW (lpString="C:\\Windows") returned 10 [0074.550] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.550] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.550] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.550] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.551] lstrlenW (lpString="524386") returned 6 [0074.551] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.551] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.551] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.551] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.551] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.551] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.551] lstrlenW (lpString="6") returned 1 [0074.551] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0074.551] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.551] lstrlenW (lpString="8") returned 1 [0074.551] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0074.551] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0074.551] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0074.551] lstrlenW (lpString="Execute: ") returned 9 [0074.551] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0074.551] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0074.551] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x16 [0074.551] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x16 [0074.552] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x16, lParam=0x0) returned 0x1 [0074.552] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0074.552] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0074.552] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0074.552] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0074.552] lstrcpynW (in: lpString1=0x432ea0, lpString2="56", iMaxLength=1024 | out: lpString1="56") returned="56" [0074.552] lstrlenW (lpString="56") returned 2 [0074.552] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="64") returned 2 [0074.552] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.552] lstrlenW (lpString="") returned 0 [0074.553] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.553] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.553] lstrcpynW (in: lpString1=0x432ea0, lpString2="64", iMaxLength=1024 | out: lpString1="64") returned="64" [0074.553] lstrlenW (lpString="64") returned 2 [0074.553] lstrcpynW (in: lpString1=0x432ea0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0074.553] lstrcpynW (in: lpString1=0x40a5f0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0074.553] lstrlenW (lpString="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned 1023 [0074.553] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned="8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0074.553] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0074.553] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1d0) returned 0x0 [0074.553] RegEnumValueW (in: hKey=0x1d0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0074.553] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.553] lstrcpynW (in: lpString1=0x432ea4, lpString2="8DB045AC", iMaxLength=1024 | out: lpString1="8DB045AC") returned="8DB045AC" [0074.553] lstrlenW (lpString="8DB045AC") returned 8 [0074.553] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="2016948272") returned 10 [0074.553] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0074.553] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0074.553] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1d0, lpdwDisposition=0x0) returned 0x0 [0074.554] RegSetValueExW (in: hKey=0x1d0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0074.554] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.554] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0074.554] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0074.554] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0074.554] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0074.554] lstrcpynW (in: lpString1=0x432ea0, lpString2="2016948272", iMaxLength=1024 | out: lpString1="2016948272") returned="2016948272" [0074.554] lstrlenW (lpString="2016948272") returned 10 [0074.554] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="78383030") returned 8 [0074.554] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.554] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.554] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.555] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.555] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.555] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.555] lstrlenW (lpString="0") returned 1 [0074.555] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.555] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.555] lstrlenW (lpString="0") returned 1 [0074.555] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.555] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.555] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.555] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.555] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.555] lstrlenW (lpString="0") returned 1 [0074.555] lstrcpynW (in: lpString1=0x432ea0, lpString2="78383030", iMaxLength=1024 | out: lpString1="78383030") returned="78383030" [0074.555] lstrlenW (lpString="78383030") returned 8 [0074.555] lstrcpynW (in: lpString1=0x40a5f0, lpString2="78383030", iMaxLength=1024 | out: lpString1="78383030") returned="78383030" [0074.555] lstrlenW (lpString="78383030") returned 8 [0074.555] lstrcpynW (in: lpString1=0x46b000, lpString2="78383030", iMaxLength=1024 | out: lpString1="78383030") returned="78383030" [0074.555] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.555] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.555] lstrlenW (lpString="") returned 0 [0074.555] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.555] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.555] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.555] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.556] lstrcpynW (in: lpString1=0x432ea4, lpString2="78", iMaxLength=1024 | out: lpString1="78") returned="78" [0074.556] lstrlenW (lpString="78") returned 2 [0074.556] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="x") returned 1 [0074.556] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.556] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.556] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.556] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.556] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.556] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.556] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.556] lstrcpynW (in: lpString1=0x432ea0, lpString2="x", iMaxLength=1024 | out: lpString1="x") returned="x" [0074.556] lstrlenW (lpString="x") returned 1 [0074.566] lstrcpynW (in: lpString1=0x40b5f0, lpString2="x", iMaxLength=1024 | out: lpString1="x") returned="x" [0074.566] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.566] lstrcmpiW (lpString1="x", lpString2="^") returned 1 [0074.566] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.567] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.567] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.567] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.567] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.567] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.568] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.568] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.568] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0") returned="KERNEL32::CreateFileA(m r4 , i 0" [0074.568] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0") returned 32 [0074.568] lstrcpynW (in: lpString1=0x432ee0, lpString2="x", iMaxLength=1024 | out: lpString1="x") returned="x" [0074.568] lstrlenW (lpString="x") returned 1 [0074.568] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x") returned="KERNEL32::CreateFileA(m r4 , i 0x" [0074.568] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x") returned 33 [0074.568] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x") returned="KERNEL32::CreateFileA(m r4 , i 0x" [0074.568] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.568] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.568] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.569] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.569] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.569] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.569] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.569] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.569] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.569] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.570] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.570] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.570] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.570] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.570] lstrlenW (lpString="C:\\Windows") returned 10 [0074.570] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.570] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.570] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.570] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.570] lstrlenW (lpString="524386") returned 6 [0074.570] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.570] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.570] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.571] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.571] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.571] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.571] lstrlenW (lpString="0") returned 1 [0074.571] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0074.571] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.571] lstrlenW (lpString="2") returned 1 [0074.571] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.571] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.571] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.571] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.571] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.571] lstrlenW (lpString="2") returned 1 [0074.571] lstrcpynW (in: lpString1=0x432ea0, lpString2="78383030", iMaxLength=1024 | out: lpString1="78383030") returned="78383030" [0074.571] lstrlenW (lpString="78383030") returned 8 [0074.571] lstrcpynW (in: lpString1=0x40a5f0, lpString2="78383030", iMaxLength=1024 | out: lpString1="78383030") returned="78383030" [0074.571] lstrlenW (lpString="78383030") returned 8 [0074.571] lstrcpynW (in: lpString1=0x46b000, lpString2="383030", iMaxLength=1024 | out: lpString1="383030") returned="383030" [0074.571] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.571] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.571] lstrlenW (lpString="") returned 0 [0074.571] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.571] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.571] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.571] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.571] lstrcpynW (in: lpString1=0x432ea4, lpString2="38", iMaxLength=1024 | out: lpString1="38") returned="38" [0074.572] lstrlenW (lpString="38") returned 2 [0074.572] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="8") returned 1 [0074.572] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.572] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.572] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.573] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.573] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.573] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.573] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.573] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.573] lstrlenW (lpString="8") returned 1 [0074.573] lstrcpynW (in: lpString1=0x40b5f0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.573] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.573] lstrcmpiW (lpString1="8", lpString2="^") returned 1 [0074.573] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.573] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.573] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.573] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.573] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.574] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.574] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.574] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.574] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x") returned="KERNEL32::CreateFileA(m r4 , i 0x" [0074.574] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x") returned 33 [0074.574] lstrcpynW (in: lpString1=0x432ee2, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.574] lstrlenW (lpString="8") returned 1 [0074.574] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x8", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x8") returned="KERNEL32::CreateFileA(m r4 , i 0x8" [0074.574] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x8") returned 34 [0074.574] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x8", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x8") returned="KERNEL32::CreateFileA(m r4 , i 0x8" [0074.574] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.574] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.574] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.574] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.574] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.575] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.575] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.575] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.575] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.575] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.575] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.575] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.575] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.575] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.575] lstrlenW (lpString="C:\\Windows") returned 10 [0074.576] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.576] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.576] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.576] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.576] lstrlenW (lpString="524386") returned 6 [0074.576] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.576] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.576] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.576] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.576] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.576] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.576] lstrlenW (lpString="2") returned 1 [0074.576] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0074.576] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.576] lstrlenW (lpString="4") returned 1 [0074.576] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.576] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.576] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.576] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.576] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.576] lstrlenW (lpString="4") returned 1 [0074.576] lstrcpynW (in: lpString1=0x432ea0, lpString2="78383030", iMaxLength=1024 | out: lpString1="78383030") returned="78383030" [0074.577] lstrlenW (lpString="78383030") returned 8 [0074.577] lstrcpynW (in: lpString1=0x40a5f0, lpString2="78383030", iMaxLength=1024 | out: lpString1="78383030") returned="78383030" [0074.577] lstrlenW (lpString="78383030") returned 8 [0074.577] lstrcpynW (in: lpString1=0x46b000, lpString2="3030", iMaxLength=1024 | out: lpString1="3030") returned="3030" [0074.577] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.577] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.577] lstrlenW (lpString="") returned 0 [0074.577] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.577] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.577] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.577] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.577] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0074.577] lstrlenW (lpString="30") returned 2 [0074.577] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0074.577] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.577] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.577] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.577] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.577] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.577] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.577] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.578] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.578] lstrlenW (lpString="0") returned 1 [0074.578] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.578] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.578] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0074.578] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.578] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.578] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.578] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.578] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.578] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.578] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.578] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.579] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x8", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x8") returned="KERNEL32::CreateFileA(m r4 , i 0x8" [0074.579] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x8") returned 34 [0074.579] lstrcpynW (in: lpString1=0x432ee4, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.579] lstrlenW (lpString="0") returned 1 [0074.579] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80") returned="KERNEL32::CreateFileA(m r4 , i 0x80" [0074.579] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80") returned 35 [0074.579] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80") returned="KERNEL32::CreateFileA(m r4 , i 0x80" [0074.579] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.579] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.579] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.579] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.579] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.579] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.579] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.579] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.580] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.580] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.580] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.580] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.580] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.580] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.580] lstrlenW (lpString="C:\\Windows") returned 10 [0074.580] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.581] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.581] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.581] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.581] lstrlenW (lpString="524386") returned 6 [0074.581] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.581] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.581] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.581] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.581] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.581] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.581] lstrlenW (lpString="4") returned 1 [0074.581] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0074.581] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.581] lstrlenW (lpString="6") returned 1 [0074.581] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.581] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.581] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.581] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.581] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.581] lstrlenW (lpString="6") returned 1 [0074.581] lstrcpynW (in: lpString1=0x432ea0, lpString2="78383030", iMaxLength=1024 | out: lpString1="78383030") returned="78383030" [0074.581] lstrlenW (lpString="78383030") returned 8 [0074.581] lstrcpynW (in: lpString1=0x40a5f0, lpString2="78383030", iMaxLength=1024 | out: lpString1="78383030") returned="78383030" [0074.582] lstrlenW (lpString="78383030") returned 8 [0074.582] lstrcpynW (in: lpString1=0x46b000, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0074.582] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.582] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.582] lstrlenW (lpString="") returned 0 [0074.582] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.582] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.582] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.582] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.582] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0074.582] lstrlenW (lpString="30") returned 2 [0074.582] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0074.582] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.582] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.582] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.582] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.582] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.582] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.582] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.582] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.582] lstrlenW (lpString="0") returned 1 [0074.582] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.583] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.583] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0074.583] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.583] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.583] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.583] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.583] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.583] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.583] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.583] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.583] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80") returned="KERNEL32::CreateFileA(m r4 , i 0x80" [0074.583] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80") returned 35 [0074.583] lstrcpynW (in: lpString1=0x432ee6, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.583] lstrlenW (lpString="0") returned 1 [0074.583] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x800", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x800") returned="KERNEL32::CreateFileA(m r4 , i 0x800" [0074.584] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x800") returned 36 [0074.584] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x800", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x800") returned="KERNEL32::CreateFileA(m r4 , i 0x800" [0074.584] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.584] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.584] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.584] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.584] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.584] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.584] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.584] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.584] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.584] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.585] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.585] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.585] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.585] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.585] lstrlenW (lpString="C:\\Windows") returned 10 [0074.585] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.585] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.585] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.585] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.585] lstrlenW (lpString="524386") returned 6 [0074.585] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.585] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.585] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.585] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.585] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.586] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.586] lstrlenW (lpString="6") returned 1 [0074.586] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0074.586] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.586] lstrlenW (lpString="8") returned 1 [0074.586] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0074.586] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0074.586] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0074.586] lstrlenW (lpString="Execute: ") returned 9 [0074.586] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0074.586] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0074.586] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x17 [0074.586] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x17 [0074.587] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x17, lParam=0x0) returned 0x1 [0074.587] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0074.588] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0074.588] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0074.588] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0074.588] lstrcpynW (in: lpString1=0x432ea0, lpString2="64", iMaxLength=1024 | out: lpString1="64") returned="64" [0074.588] lstrlenW (lpString="64") returned 2 [0074.588] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="72") returned 2 [0074.588] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.588] lstrlenW (lpString="") returned 0 [0074.588] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.588] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.588] lstrcpynW (in: lpString1=0x432ea0, lpString2="72", iMaxLength=1024 | out: lpString1="72") returned="72" [0074.588] lstrlenW (lpString="72") returned 2 [0074.588] lstrcpynW (in: lpString1=0x432ea0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0074.589] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0074.591] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0074.591] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1d0) returned 0x0 [0074.591] RegEnumValueW (in: hKey=0x1d0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0074.591] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.591] lstrcpynW (in: lpString1=0x432ea4, lpString2="C5B845AC", iMaxLength=1024 | out: lpString1="C5B845AC") returned="C5B845AC" [0074.591] lstrlenW (lpString="C5B845AC") returned 8 [0074.591] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="808464432") returned 9 [0074.591] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0074.591] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0074.591] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1d0, lpdwDisposition=0x0) returned 0x0 [0074.591] RegSetValueExW (in: hKey=0x1d0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0074.591] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.592] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0074.592] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0074.592] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0074.592] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0074.592] lstrcpynW (in: lpString1=0x432ea0, lpString2="808464432", iMaxLength=1024 | out: lpString1="808464432") returned="808464432" [0074.592] lstrlenW (lpString="808464432") returned 9 [0074.592] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="30303030") returned 8 [0074.592] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.592] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.592] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.593] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.593] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.593] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.593] lstrlenW (lpString="0") returned 1 [0074.593] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.593] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.593] lstrlenW (lpString="0") returned 1 [0074.593] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.593] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.593] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.593] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.593] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.593] lstrlenW (lpString="0") returned 1 [0074.593] lstrcpynW (in: lpString1=0x432ea0, lpString2="30303030", iMaxLength=1024 | out: lpString1="30303030") returned="30303030" [0074.593] lstrlenW (lpString="30303030") returned 8 [0074.593] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30303030", iMaxLength=1024 | out: lpString1="30303030") returned="30303030" [0074.593] lstrlenW (lpString="30303030") returned 8 [0074.593] lstrcpynW (in: lpString1=0x46b000, lpString2="30303030", iMaxLength=1024 | out: lpString1="30303030") returned="30303030" [0074.593] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.593] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.593] lstrlenW (lpString="") returned 0 [0074.593] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.593] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.593] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.593] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.593] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0074.593] lstrlenW (lpString="30") returned 2 [0074.593] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0074.594] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.594] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.594] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.594] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.594] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.594] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.594] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.594] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.594] lstrlenW (lpString="0") returned 1 [0074.594] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.594] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.594] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0074.594] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.594] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.594] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.595] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.595] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.595] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.595] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.595] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.595] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.595] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.595] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.596] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.596] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.596] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.596] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.596] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.596] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.596] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.596] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.596] lstrlenW (lpString="C:\\Windows") returned 10 [0074.596] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.597] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.597] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.597] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.597] lstrlenW (lpString="524386") returned 6 [0074.597] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.597] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.597] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.597] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.597] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.597] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.597] lstrlenW (lpString="0") returned 1 [0074.597] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0074.597] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.597] lstrlenW (lpString="2") returned 1 [0074.597] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.597] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.597] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.597] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.597] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.597] lstrlenW (lpString="2") returned 1 [0074.597] lstrcpynW (in: lpString1=0x432ea0, lpString2="30303030", iMaxLength=1024 | out: lpString1="30303030") returned="30303030" [0074.597] lstrlenW (lpString="30303030") returned 8 [0074.598] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30303030", iMaxLength=1024 | out: lpString1="30303030") returned="30303030" [0074.598] lstrlenW (lpString="30303030") returned 8 [0074.598] lstrcpynW (in: lpString1=0x46b000, lpString2="303030", iMaxLength=1024 | out: lpString1="303030") returned="303030" [0074.598] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.598] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.598] lstrlenW (lpString="") returned 0 [0074.598] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.598] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.598] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.598] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.598] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0074.598] lstrlenW (lpString="30") returned 2 [0074.598] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0074.598] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.598] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.598] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.598] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.598] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.598] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.598] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.599] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.599] lstrlenW (lpString="0") returned 1 [0074.599] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.599] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.599] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0074.599] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.599] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.599] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.599] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.599] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.599] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.599] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.599] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.599] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x8000", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x8000") returned="KERNEL32::CreateFileA(m r4 , i 0x8000" [0074.599] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x8000") returned 37 [0074.600] lstrcpynW (in: lpString1=0x432eea, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.600] lstrlenW (lpString="0") returned 1 [0074.600] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000") returned="KERNEL32::CreateFileA(m r4 , i 0x80000" [0074.600] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000") returned 38 [0074.600] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000") returned="KERNEL32::CreateFileA(m r4 , i 0x80000" [0074.600] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.600] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.600] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.600] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.600] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.600] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.600] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.600] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.601] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.601] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.601] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.601] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.601] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.601] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.601] lstrlenW (lpString="C:\\Windows") returned 10 [0074.601] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.601] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.601] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.601] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.602] lstrlenW (lpString="524386") returned 6 [0074.602] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.602] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.602] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.602] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.602] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.602] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.602] lstrlenW (lpString="2") returned 1 [0074.602] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0074.602] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.602] lstrlenW (lpString="4") returned 1 [0074.602] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.602] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.602] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.602] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.602] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.602] lstrlenW (lpString="4") returned 1 [0074.602] lstrcpynW (in: lpString1=0x432ea0, lpString2="30303030", iMaxLength=1024 | out: lpString1="30303030") returned="30303030" [0074.602] lstrlenW (lpString="30303030") returned 8 [0074.602] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30303030", iMaxLength=1024 | out: lpString1="30303030") returned="30303030" [0074.602] lstrlenW (lpString="30303030") returned 8 [0074.602] lstrcpynW (in: lpString1=0x46b000, lpString2="3030", iMaxLength=1024 | out: lpString1="3030") returned="3030" [0074.602] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.602] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.602] lstrlenW (lpString="") returned 0 [0074.602] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.602] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.603] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.603] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.603] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0074.603] lstrlenW (lpString="30") returned 2 [0074.603] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0074.603] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.603] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.603] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.603] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.603] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.603] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.603] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.603] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.603] lstrlenW (lpString="0") returned 1 [0074.603] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.603] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.603] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0074.603] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.604] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.604] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.604] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.604] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.604] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.604] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.604] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.604] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000") returned="KERNEL32::CreateFileA(m r4 , i 0x80000" [0074.604] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000") returned 38 [0074.604] lstrcpynW (in: lpString1=0x432eec, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.604] lstrlenW (lpString="0") returned 1 [0074.604] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x800000", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x800000") returned="KERNEL32::CreateFileA(m r4 , i 0x800000" [0074.604] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x800000") returned 39 [0074.604] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x800000", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x800000") returned="KERNEL32::CreateFileA(m r4 , i 0x800000" [0074.604] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.605] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.605] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.605] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.605] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.605] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.605] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.605] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.605] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.605] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.605] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.606] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.606] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.606] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.606] lstrlenW (lpString="C:\\Windows") returned 10 [0074.606] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.606] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.606] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.606] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.606] lstrlenW (lpString="524386") returned 6 [0074.606] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.606] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.606] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.606] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.606] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.606] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.606] lstrlenW (lpString="4") returned 1 [0074.606] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0074.606] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.606] lstrlenW (lpString="6") returned 1 [0074.607] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.607] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.607] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.607] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.607] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.607] lstrlenW (lpString="6") returned 1 [0074.607] lstrcpynW (in: lpString1=0x432ea0, lpString2="30303030", iMaxLength=1024 | out: lpString1="30303030") returned="30303030" [0074.607] lstrlenW (lpString="30303030") returned 8 [0074.607] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30303030", iMaxLength=1024 | out: lpString1="30303030") returned="30303030" [0074.607] lstrlenW (lpString="30303030") returned 8 [0074.607] lstrcpynW (in: lpString1=0x46b000, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0074.607] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.607] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.607] lstrlenW (lpString="") returned 0 [0074.607] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.607] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.607] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.607] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.607] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0074.607] lstrlenW (lpString="30") returned 2 [0074.607] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0074.607] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.607] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.607] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.608] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.608] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.608] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.608] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.608] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.608] lstrlenW (lpString="0") returned 1 [0074.608] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.608] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.608] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0074.608] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.608] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.608] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.608] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.608] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.608] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.610] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.610] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.610] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x800000", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x800000") returned="KERNEL32::CreateFileA(m r4 , i 0x800000" [0074.610] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x800000") returned 39 [0074.610] lstrcpynW (in: lpString1=0x432eee, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.610] lstrlenW (lpString="0") returned 1 [0074.610] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x8000000", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x8000000") returned="KERNEL32::CreateFileA(m r4 , i 0x8000000" [0074.610] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x8000000") returned 40 [0074.610] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x8000000", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x8000000") returned="KERNEL32::CreateFileA(m r4 , i 0x8000000" [0074.610] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.610] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.610] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.610] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.610] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.610] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.610] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.610] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.611] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.611] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.611] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.611] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.611] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.611] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.611] lstrlenW (lpString="C:\\Windows") returned 10 [0074.611] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.611] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.611] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.611] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.611] lstrlenW (lpString="524386") returned 6 [0074.612] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.612] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.612] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.612] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.612] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.612] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.612] lstrlenW (lpString="6") returned 1 [0074.612] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0074.612] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.612] lstrlenW (lpString="8") returned 1 [0074.612] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0074.612] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0074.612] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0074.612] lstrlenW (lpString="Execute: ") returned 9 [0074.612] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0074.612] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0074.612] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x18 [0074.612] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x18 [0074.613] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x18, lParam=0x0) returned 0x1 [0074.613] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0074.613] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0074.613] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0074.613] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0074.613] lstrcpynW (in: lpString1=0x432ea0, lpString2="72", iMaxLength=1024 | out: lpString1="72") returned="72" [0074.613] lstrlenW (lpString="72") returned 2 [0074.613] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="80") returned 2 [0074.613] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.613] lstrlenW (lpString="") returned 0 [0074.614] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.614] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.614] lstrcpynW (in: lpString1=0x432ea0, lpString2="80", iMaxLength=1024 | out: lpString1="80") returned="80" [0074.614] lstrlenW (lpString="80") returned 2 [0074.614] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0074.614] lstrlenW (lpString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returned 1023 [0074.614] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned 1023 [0074.614] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0074.614] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1d0) returned 0x0 [0074.614] RegEnumValueW (in: hKey=0x1d0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0074.614] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.614] lstrcpynW (in: lpString1=0x432ea4, lpString2="C5A455F5", iMaxLength=1024 | out: lpString1="C5A455F5") returned="C5A455F5" [0074.614] lstrlenW (lpString="C5A455F5") returned 8 [0074.614] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="808198249") returned 9 [0074.614] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0074.614] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0074.614] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1d0, lpdwDisposition=0x0) returned 0x0 [0074.615] RegSetValueExW (in: hKey=0x1d0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0074.615] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.615] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0074.615] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0074.615] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0074.615] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0074.615] lstrcpynW (in: lpString1=0x432ea0, lpString2="808198249", iMaxLength=1024 | out: lpString1="808198249") returned="808198249" [0074.615] lstrlenW (lpString="808198249") returned 9 [0074.615] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="302C2069") returned 8 [0074.615] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.615] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.615] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.616] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.616] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.616] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.616] lstrlenW (lpString="0") returned 1 [0074.616] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.616] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.616] lstrlenW (lpString="0") returned 1 [0074.616] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.616] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.616] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.616] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.616] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.616] lstrlenW (lpString="0") returned 1 [0074.616] lstrcpynW (in: lpString1=0x432ea0, lpString2="302C2069", iMaxLength=1024 | out: lpString1="302C2069") returned="302C2069" [0074.616] lstrlenW (lpString="302C2069") returned 8 [0074.616] lstrcpynW (in: lpString1=0x40a5f0, lpString2="302C2069", iMaxLength=1024 | out: lpString1="302C2069") returned="302C2069" [0074.616] lstrlenW (lpString="302C2069") returned 8 [0074.616] lstrcpynW (in: lpString1=0x46b000, lpString2="302C2069", iMaxLength=1024 | out: lpString1="302C2069") returned="302C2069" [0074.616] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.616] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.616] lstrlenW (lpString="") returned 0 [0074.616] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.616] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.616] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.616] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.617] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0074.617] lstrlenW (lpString="30") returned 2 [0074.617] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0074.617] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.617] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.617] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.617] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.617] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.617] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.617] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.617] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.617] lstrlenW (lpString="0") returned 1 [0074.617] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.617] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.617] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0074.617] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.617] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.617] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.618] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.618] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.618] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.618] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.618] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.618] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x8000000", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x8000000") returned="KERNEL32::CreateFileA(m r4 , i 0x8000000" [0074.618] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x8000000") returned 40 [0074.618] lstrcpynW (in: lpString1=0x432ef0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.618] lstrlenW (lpString="0") returned 1 [0074.618] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000" [0074.618] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000") returned 41 [0074.618] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000" [0074.618] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.618] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.618] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.618] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.619] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.619] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.619] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.619] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.619] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.619] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.620] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.620] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.620] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.620] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.620] lstrlenW (lpString="C:\\Windows") returned 10 [0074.620] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.620] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.620] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.620] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.620] lstrlenW (lpString="524386") returned 6 [0074.620] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.620] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.620] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.620] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.620] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.621] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.621] lstrlenW (lpString="0") returned 1 [0074.621] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0074.621] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.621] lstrlenW (lpString="2") returned 1 [0074.621] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.621] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.621] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.621] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.621] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.621] lstrlenW (lpString="2") returned 1 [0074.621] lstrcpynW (in: lpString1=0x432ea0, lpString2="302C2069", iMaxLength=1024 | out: lpString1="302C2069") returned="302C2069" [0074.621] lstrlenW (lpString="302C2069") returned 8 [0074.621] lstrcpynW (in: lpString1=0x40a5f0, lpString2="302C2069", iMaxLength=1024 | out: lpString1="302C2069") returned="302C2069" [0074.621] lstrlenW (lpString="302C2069") returned 8 [0074.621] lstrcpynW (in: lpString1=0x46b000, lpString2="2C2069", iMaxLength=1024 | out: lpString1="2C2069") returned="2C2069" [0074.621] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.621] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.621] lstrlenW (lpString="") returned 0 [0074.621] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.621] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.621] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.621] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.621] lstrcpynW (in: lpString1=0x432ea4, lpString2="2C", iMaxLength=1024 | out: lpString1="2C") returned="2C" [0074.621] lstrlenW (lpString="2C") returned 2 [0074.621] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=",") returned 1 [0074.621] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.621] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.622] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.622] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.622] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.622] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.622] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.622] lstrcpynW (in: lpString1=0x432ea0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0074.622] lstrlenW (lpString=",") returned 1 [0074.622] lstrcpynW (in: lpString1=0x40b5f0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0074.622] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.622] lstrcmpiW (lpString1=",", lpString2="^") returned -1 [0074.622] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.622] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.622] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.622] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.622] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.622] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.623] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.623] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.623] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000" [0074.623] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000") returned 41 [0074.623] lstrcpynW (in: lpString1=0x432ef2, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0074.623] lstrlenW (lpString=",") returned 1 [0074.623] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000,", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000,") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000," [0074.623] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000,") returned 42 [0074.623] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000,", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000,") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000," [0074.623] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.623] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.623] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.623] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.623] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.623] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.623] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.624] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.624] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.624] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.624] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.624] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.624] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.624] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.624] lstrlenW (lpString="C:\\Windows") returned 10 [0074.624] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.624] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.625] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.625] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.625] lstrlenW (lpString="524386") returned 6 [0074.625] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.625] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.625] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.625] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.625] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.625] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.625] lstrlenW (lpString="2") returned 1 [0074.625] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0074.625] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.625] lstrlenW (lpString="4") returned 1 [0074.625] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.625] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.625] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.625] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.625] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.625] lstrlenW (lpString="4") returned 1 [0074.625] lstrcpynW (in: lpString1=0x432ea0, lpString2="302C2069", iMaxLength=1024 | out: lpString1="302C2069") returned="302C2069" [0074.625] lstrlenW (lpString="302C2069") returned 8 [0074.625] lstrcpynW (in: lpString1=0x40a5f0, lpString2="302C2069", iMaxLength=1024 | out: lpString1="302C2069") returned="302C2069" [0074.625] lstrlenW (lpString="302C2069") returned 8 [0074.625] lstrcpynW (in: lpString1=0x46b000, lpString2="2069", iMaxLength=1024 | out: lpString1="2069") returned="2069" [0074.625] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.625] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.626] lstrlenW (lpString="") returned 0 [0074.626] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.626] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.626] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.626] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.626] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0074.626] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0074.626] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.626] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.626] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.626] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.626] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.626] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.626] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.626] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.626] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.626] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.626] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0074.626] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.626] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.627] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.627] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.627] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.627] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.627] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.627] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.627] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000,", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000,") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000," [0074.627] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000,") returned 42 [0074.627] lstrcpynW (in: lpString1=0x432ef4, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.627] lstrlenW (lpString=" ") returned 1 [0074.627] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, " [0074.627] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, ") returned 43 [0074.627] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, " [0074.627] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.627] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.627] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.628] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.628] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.628] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.628] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.628] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.628] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.628] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.628] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.628] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.628] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.629] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.629] lstrlenW (lpString="C:\\Windows") returned 10 [0074.629] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.629] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.629] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.629] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.629] lstrlenW (lpString="524386") returned 6 [0074.629] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.629] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.629] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.629] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.629] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.629] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.629] lstrlenW (lpString="4") returned 1 [0074.629] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0074.629] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.629] lstrlenW (lpString="6") returned 1 [0074.629] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.629] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.629] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.629] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.630] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.630] lstrlenW (lpString="6") returned 1 [0074.630] lstrcpynW (in: lpString1=0x432ea0, lpString2="302C2069", iMaxLength=1024 | out: lpString1="302C2069") returned="302C2069" [0074.630] lstrlenW (lpString="302C2069") returned 8 [0074.630] lstrcpynW (in: lpString1=0x40a5f0, lpString2="302C2069", iMaxLength=1024 | out: lpString1="302C2069") returned="302C2069" [0074.630] lstrlenW (lpString="302C2069") returned 8 [0074.630] lstrcpynW (in: lpString1=0x46b000, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0074.630] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.630] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.630] lstrlenW (lpString="") returned 0 [0074.630] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.630] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.630] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.630] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.630] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0074.630] lstrlenW (lpString="69") returned 2 [0074.630] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0074.630] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.630] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.630] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.630] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.630] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.630] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.631] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.631] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0074.631] lstrlenW (lpString="i") returned 1 [0074.631] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0074.631] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.631] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0074.631] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.631] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.631] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.631] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.631] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.631] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.631] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.631] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.631] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, " [0074.631] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, ") returned 43 [0074.631] lstrcpynW (in: lpString1=0x432ef6, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0074.632] lstrlenW (lpString="i") returned 1 [0074.632] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i" [0074.632] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i") returned 44 [0074.632] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i" [0074.632] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.632] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.632] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.632] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.632] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.632] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.632] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.632] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.632] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.632] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.633] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.633] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.633] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.633] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.633] lstrlenW (lpString="C:\\Windows") returned 10 [0074.633] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.633] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.633] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.633] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.633] lstrlenW (lpString="524386") returned 6 [0074.633] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.633] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.633] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.633] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.633] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.634] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.634] lstrlenW (lpString="6") returned 1 [0074.634] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0074.634] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.634] lstrlenW (lpString="8") returned 1 [0074.634] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0074.634] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0074.634] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0074.634] lstrlenW (lpString="Execute: ") returned 9 [0074.634] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0074.634] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0074.634] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x19 [0074.635] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x19 [0074.635] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x19, lParam=0x0) returned 0x1 [0074.635] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0074.635] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0074.635] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0074.635] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0074.635] lstrcpynW (in: lpString1=0x432ea0, lpString2="80", iMaxLength=1024 | out: lpString1="80") returned="80" [0074.635] lstrlenW (lpString="80") returned 2 [0074.636] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="88") returned 2 [0074.636] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.636] lstrlenW (lpString="") returned 0 [0074.636] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.636] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.636] lstrcpynW (in: lpString1=0x432ea0, lpString2="88", iMaxLength=1024 | out: lpString1="88") returned="88" [0074.636] lstrlenW (lpString="88") returned 2 [0074.636] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0074.636] lstrlenW (lpString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returned 1023 [0074.636] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned 1023 [0074.636] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString1="D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0074.636] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1d0) returned 0x0 [0074.636] RegEnumValueW (in: hKey=0x1d0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0074.636] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.636] lstrcpynW (in: lpString1=0x432ea4, lpString2="D5B859BC", iMaxLength=1024 | out: lpString1="D5B859BC") returned="D5B859BC" [0074.636] lstrlenW (lpString="D5B859BC") returned 8 [0074.636] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="540027936") returned 9 [0074.636] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0074.637] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0074.637] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1d0, lpdwDisposition=0x0) returned 0x0 [0074.637] RegSetValueExW (in: hKey=0x1d0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0074.637] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.637] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0074.637] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0074.637] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0074.637] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0074.637] lstrcpynW (in: lpString1=0x432ea0, lpString2="540027936", iMaxLength=1024 | out: lpString1="540027936") returned="540027936" [0074.637] lstrlenW (lpString="540027936") returned 9 [0074.637] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="20302C20") returned 8 [0074.637] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.637] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.638] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.638] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.638] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.638] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.638] lstrlenW (lpString="0") returned 1 [0074.638] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.638] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.638] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.638] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.638] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.638] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0074.638] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.638] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.638] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.639] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.639] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0074.639] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.639] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.639] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.639] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.639] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.639] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.639] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.639] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.639] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i" [0074.639] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i") returned 44 [0074.639] lstrcpynW (in: lpString1=0x432ef8, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.639] lstrlenW (lpString=" ") returned 1 [0074.639] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i " [0074.639] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i ") returned 45 [0074.640] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i " [0074.640] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.640] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.640] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.640] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.640] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.640] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.640] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.640] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.640] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.640] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.641] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.641] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.641] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.641] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.641] lstrlenW (lpString="C:\\Windows") returned 10 [0074.641] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.641] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.641] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.641] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.641] lstrlenW (lpString="524386") returned 6 [0074.641] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.641] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.641] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.641] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.641] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.641] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.642] lstrlenW (lpString="0") returned 1 [0074.642] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0074.642] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.642] lstrlenW (lpString="2") returned 1 [0074.642] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.642] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.642] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.642] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.642] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.642] lstrlenW (lpString="2") returned 1 [0074.642] lstrcpynW (in: lpString1=0x432ea0, lpString2="20302C20", iMaxLength=1024 | out: lpString1="20302C20") returned="20302C20" [0074.642] lstrlenW (lpString="20302C20") returned 8 [0074.642] lstrcpynW (in: lpString1=0x40a5f0, lpString2="20302C20", iMaxLength=1024 | out: lpString1="20302C20") returned="20302C20" [0074.642] lstrlenW (lpString="20302C20") returned 8 [0074.642] lstrcpynW (in: lpString1=0x46b000, lpString2="302C20", iMaxLength=1024 | out: lpString1="302C20") returned="302C20" [0074.642] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.642] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.642] lstrlenW (lpString="") returned 0 [0074.642] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.642] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.642] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.642] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.642] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0074.642] lstrlenW (lpString="30") returned 2 [0074.642] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0074.642] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.642] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.642] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.643] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.643] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.643] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.643] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.643] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.643] lstrlenW (lpString="0") returned 1 [0074.643] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.643] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.643] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0074.643] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.643] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.643] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.643] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.643] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.643] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.644] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.644] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.644] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i " [0074.644] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i ") returned 45 [0074.644] lstrcpynW (in: lpString1=0x432efa, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.644] lstrlenW (lpString="0") returned 1 [0074.644] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0" [0074.644] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0") returned 46 [0074.644] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0" [0074.644] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.644] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.644] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.644] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.644] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.644] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.644] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.645] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.645] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.645] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.645] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.645] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.645] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.645] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.645] lstrlenW (lpString="C:\\Windows") returned 10 [0074.645] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.645] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.645] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.646] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.646] lstrlenW (lpString="524386") returned 6 [0074.646] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.646] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.646] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.646] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.646] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.646] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.646] lstrlenW (lpString="2") returned 1 [0074.646] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0074.646] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.646] lstrlenW (lpString="4") returned 1 [0074.646] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.646] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.646] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.646] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.646] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.646] lstrlenW (lpString="4") returned 1 [0074.646] lstrcpynW (in: lpString1=0x432ea0, lpString2="20302C20", iMaxLength=1024 | out: lpString1="20302C20") returned="20302C20" [0074.646] lstrlenW (lpString="20302C20") returned 8 [0074.646] lstrcpynW (in: lpString1=0x40a5f0, lpString2="20302C20", iMaxLength=1024 | out: lpString1="20302C20") returned="20302C20" [0074.646] lstrlenW (lpString="20302C20") returned 8 [0074.646] lstrcpynW (in: lpString1=0x46b000, lpString2="2C20", iMaxLength=1024 | out: lpString1="2C20") returned="2C20" [0074.646] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.646] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.646] lstrlenW (lpString="") returned 0 [0074.646] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.647] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.647] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.647] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.647] lstrcpynW (in: lpString1=0x432ea4, lpString2="2C", iMaxLength=1024 | out: lpString1="2C") returned="2C" [0074.647] lstrlenW (lpString="2C") returned 2 [0074.647] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=",") returned 1 [0074.647] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.647] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.647] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.647] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.647] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.647] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.647] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.647] lstrcpynW (in: lpString1=0x432ea0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0074.647] lstrlenW (lpString=",") returned 1 [0074.647] lstrcpynW (in: lpString1=0x40b5f0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0074.647] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.647] lstrcmpiW (lpString1=",", lpString2="^") returned -1 [0074.647] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.647] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.648] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.648] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.648] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.648] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.648] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.648] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.648] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0" [0074.648] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0") returned 46 [0074.648] lstrcpynW (in: lpString1=0x432efc, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0074.648] lstrlenW (lpString=",") returned 1 [0074.648] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0,", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0,") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0," [0074.648] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0,") returned 47 [0074.648] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0,", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0,") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0," [0074.648] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.648] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.648] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.649] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.649] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.649] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.649] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.649] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.649] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.649] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.649] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.649] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.649] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.649] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.650] lstrlenW (lpString="C:\\Windows") returned 10 [0074.650] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.650] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.650] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.650] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.650] lstrlenW (lpString="524386") returned 6 [0074.650] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.650] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.650] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.650] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.650] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.651] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.651] lstrlenW (lpString="4") returned 1 [0074.651] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0074.651] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.651] lstrlenW (lpString="6") returned 1 [0074.651] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.651] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.651] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.651] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.651] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.651] lstrlenW (lpString="6") returned 1 [0074.651] lstrcpynW (in: lpString1=0x432ea0, lpString2="20302C20", iMaxLength=1024 | out: lpString1="20302C20") returned="20302C20" [0074.651] lstrlenW (lpString="20302C20") returned 8 [0074.651] lstrcpynW (in: lpString1=0x40a5f0, lpString2="20302C20", iMaxLength=1024 | out: lpString1="20302C20") returned="20302C20" [0074.651] lstrlenW (lpString="20302C20") returned 8 [0074.651] lstrcpynW (in: lpString1=0x46b000, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0074.651] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.651] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.651] lstrlenW (lpString="") returned 0 [0074.651] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.651] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.651] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.651] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.651] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0074.651] lstrlenW (lpString="20") returned 2 [0074.651] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0074.651] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.651] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.652] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.652] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.652] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.652] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.652] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.652] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.652] lstrlenW (lpString=" ") returned 1 [0074.652] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.652] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.652] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0074.652] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.652] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.652] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.652] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.652] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.652] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.653] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.653] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.653] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0,", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0,") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0," [0074.653] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0,") returned 47 [0074.653] lstrcpynW (in: lpString1=0x432efe, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.653] lstrlenW (lpString=" ") returned 1 [0074.653] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, " [0074.653] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, ") returned 48 [0074.653] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, " [0074.653] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.653] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.653] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.653] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.653] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.653] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.653] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.654] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.654] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.654] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.654] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.654] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.654] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.654] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.654] lstrlenW (lpString="C:\\Windows") returned 10 [0074.654] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.654] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.654] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.655] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.655] lstrlenW (lpString="524386") returned 6 [0074.655] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.655] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.655] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.655] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.655] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.655] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.655] lstrlenW (lpString="6") returned 1 [0074.655] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0074.655] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.655] lstrlenW (lpString="8") returned 1 [0074.655] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0074.655] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0074.655] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0074.655] lstrlenW (lpString="Execute: ") returned 9 [0074.655] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0074.655] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0074.655] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x1a [0074.655] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x1a [0074.656] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x1a, lParam=0x0) returned 0x1 [0074.656] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0074.656] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0074.656] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0074.656] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0074.656] lstrcpynW (in: lpString1=0x432ea0, lpString2="88", iMaxLength=1024 | out: lpString1="88") returned="88" [0074.656] lstrlenW (lpString="88") returned 2 [0074.656] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="96") returned 2 [0074.656] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.657] lstrlenW (lpString="") returned 0 [0074.657] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.657] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.657] lstrcpynW (in: lpString1=0x432ea0, lpString2="96", iMaxLength=1024 | out: lpString1="96") returned="96" [0074.657] lstrlenW (lpString="96") returned 2 [0074.657] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0074.657] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0074.657] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString1="85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0074.657] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1d0) returned 0x0 [0074.657] RegEnumValueW (in: hKey=0x1d0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0074.657] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.657] lstrcpynW (in: lpString1=0x432ea4, lpString2="85A845B0", iMaxLength=1024 | out: lpString1="85A845B0") returned="85A845B0" [0074.657] lstrlenW (lpString="85A845B0") returned 8 [0074.657] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1881157676") returned 10 [0074.657] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0074.657] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0074.657] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1d0, lpdwDisposition=0x0) returned 0x0 [0074.658] RegSetValueExW (in: hKey=0x1d0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0074.658] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.658] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0074.658] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0074.658] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0074.658] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0074.658] lstrcpynW (in: lpString1=0x432ea0, lpString2="1881157676", iMaxLength=1024 | out: lpString1="1881157676") returned="1881157676" [0074.658] lstrlenW (lpString="1881157676") returned 10 [0074.658] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="7020302C") returned 8 [0074.658] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.658] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.658] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.659] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.659] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.659] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.659] lstrlenW (lpString="0") returned 1 [0074.659] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.659] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.659] lstrlenW (lpString="0") returned 1 [0074.659] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.659] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.659] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.659] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.659] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.659] lstrlenW (lpString="0") returned 1 [0074.659] lstrcpynW (in: lpString1=0x432ea0, lpString2="7020302C", iMaxLength=1024 | out: lpString1="7020302C") returned="7020302C" [0074.659] lstrlenW (lpString="7020302C") returned 8 [0074.659] lstrcpynW (in: lpString1=0x40a5f0, lpString2="7020302C", iMaxLength=1024 | out: lpString1="7020302C") returned="7020302C" [0074.659] lstrlenW (lpString="7020302C") returned 8 [0074.659] lstrcpynW (in: lpString1=0x46b000, lpString2="7020302C", iMaxLength=1024 | out: lpString1="7020302C") returned="7020302C" [0074.659] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.659] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.659] lstrlenW (lpString="") returned 0 [0074.659] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.659] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.659] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.659] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.659] lstrcpynW (in: lpString1=0x432ea4, lpString2="70", iMaxLength=1024 | out: lpString1="70") returned="70" [0074.660] lstrlenW (lpString="70") returned 2 [0074.660] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="p") returned 1 [0074.660] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.660] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.660] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.660] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.660] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.660] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.660] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.660] lstrcpynW (in: lpString1=0x432ea0, lpString2="p", iMaxLength=1024 | out: lpString1="p") returned="p" [0074.660] lstrlenW (lpString="p") returned 1 [0074.660] lstrcpynW (in: lpString1=0x40b5f0, lpString2="p", iMaxLength=1024 | out: lpString1="p") returned="p" [0074.660] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.660] lstrcmpiW (lpString1="p", lpString2="^") returned 1 [0074.660] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.660] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.660] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.661] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.661] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.661] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.661] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.661] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.661] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, " [0074.661] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, ") returned 48 [0074.661] lstrcpynW (in: lpString1=0x432f00, lpString2="p", iMaxLength=1024 | out: lpString1="p") returned="p" [0074.661] lstrlenW (lpString="p") returned 1 [0074.661] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p" [0074.661] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p") returned 49 [0074.661] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p" [0074.661] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.661] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.661] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.661] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.661] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.662] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.662] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.662] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.662] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.662] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.662] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.662] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.662] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.662] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.662] lstrlenW (lpString="C:\\Windows") returned 10 [0074.662] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.663] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.663] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.663] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.663] lstrlenW (lpString="524386") returned 6 [0074.663] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.663] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.663] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.663] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.663] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.663] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.663] lstrlenW (lpString="0") returned 1 [0074.663] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0074.663] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.663] lstrlenW (lpString="2") returned 1 [0074.663] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.663] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.663] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.663] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.663] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.663] lstrlenW (lpString="2") returned 1 [0074.663] lstrcpynW (in: lpString1=0x432ea0, lpString2="7020302C", iMaxLength=1024 | out: lpString1="7020302C") returned="7020302C" [0074.663] lstrlenW (lpString="7020302C") returned 8 [0074.663] lstrcpynW (in: lpString1=0x40a5f0, lpString2="7020302C", iMaxLength=1024 | out: lpString1="7020302C") returned="7020302C" [0074.663] lstrlenW (lpString="7020302C") returned 8 [0074.663] lstrcpynW (in: lpString1=0x46b000, lpString2="20302C", iMaxLength=1024 | out: lpString1="20302C") returned="20302C" [0074.664] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.664] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.664] lstrlenW (lpString="") returned 0 [0074.664] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.664] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.664] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.664] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.664] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0074.664] lstrlenW (lpString="20") returned 2 [0074.664] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0074.664] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.664] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.664] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.664] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.664] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.664] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.664] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.664] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.664] lstrlenW (lpString=" ") returned 1 [0074.664] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.664] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.664] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0074.665] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.665] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.665] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.665] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.665] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.665] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.665] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.665] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.665] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p" [0074.665] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p") returned 49 [0074.665] lstrcpynW (in: lpString1=0x432f02, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.665] lstrlenW (lpString=" ") returned 1 [0074.665] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p " [0074.665] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p ") returned 50 [0074.666] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p " [0074.666] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.666] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.666] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.666] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.666] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.666] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.666] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.666] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.667] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.667] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.667] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.667] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.667] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.667] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.667] lstrlenW (lpString="C:\\Windows") returned 10 [0074.667] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.667] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.667] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.667] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.667] lstrlenW (lpString="524386") returned 6 [0074.667] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.667] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.668] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.668] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.668] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.668] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.668] lstrlenW (lpString="2") returned 1 [0074.668] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0074.668] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.668] lstrlenW (lpString="4") returned 1 [0074.668] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.668] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.668] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.668] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.668] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.668] lstrlenW (lpString="4") returned 1 [0074.668] lstrcpynW (in: lpString1=0x432ea0, lpString2="7020302C", iMaxLength=1024 | out: lpString1="7020302C") returned="7020302C" [0074.668] lstrlenW (lpString="7020302C") returned 8 [0074.668] lstrcpynW (in: lpString1=0x40a5f0, lpString2="7020302C", iMaxLength=1024 | out: lpString1="7020302C") returned="7020302C" [0074.668] lstrlenW (lpString="7020302C") returned 8 [0074.668] lstrcpynW (in: lpString1=0x46b000, lpString2="302C", iMaxLength=1024 | out: lpString1="302C") returned="302C" [0074.668] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.668] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.668] lstrlenW (lpString="") returned 0 [0074.668] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.668] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.668] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.668] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.668] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0074.669] lstrlenW (lpString="30") returned 2 [0074.669] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0074.669] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.669] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.669] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.669] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.669] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.669] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.669] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.669] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.669] lstrlenW (lpString="0") returned 1 [0074.669] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.669] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.669] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0074.670] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.670] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.670] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.670] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.670] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.670] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.670] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.670] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.671] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p " [0074.671] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p ") returned 50 [0074.671] lstrcpynW (in: lpString1=0x432f04, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.671] lstrlenW (lpString="0") returned 1 [0074.671] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0" [0074.671] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0") returned 51 [0074.671] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0" [0074.671] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.671] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.671] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.671] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.671] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.671] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.671] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.672] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.672] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.672] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.672] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.672] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.672] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.672] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.672] lstrlenW (lpString="C:\\Windows") returned 10 [0074.672] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.672] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.672] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.673] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.673] lstrlenW (lpString="524386") returned 6 [0074.673] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.673] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.673] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.673] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.673] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.673] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.673] lstrlenW (lpString="4") returned 1 [0074.673] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0074.673] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.673] lstrlenW (lpString="6") returned 1 [0074.673] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.673] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.673] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.673] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.673] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.673] lstrlenW (lpString="6") returned 1 [0074.673] lstrcpynW (in: lpString1=0x432ea0, lpString2="7020302C", iMaxLength=1024 | out: lpString1="7020302C") returned="7020302C" [0074.673] lstrlenW (lpString="7020302C") returned 8 [0074.673] lstrcpynW (in: lpString1=0x40a5f0, lpString2="7020302C", iMaxLength=1024 | out: lpString1="7020302C") returned="7020302C" [0074.673] lstrlenW (lpString="7020302C") returned 8 [0074.673] lstrcpynW (in: lpString1=0x46b000, lpString2="2C", iMaxLength=1024 | out: lpString1="2C") returned="2C" [0074.673] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.673] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.673] lstrlenW (lpString="") returned 0 [0074.674] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.674] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.674] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.674] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.674] lstrcpynW (in: lpString1=0x432ea4, lpString2="2C", iMaxLength=1024 | out: lpString1="2C") returned="2C" [0074.674] lstrlenW (lpString="2C") returned 2 [0074.674] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=",") returned 1 [0074.674] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.674] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.674] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.674] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.674] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.674] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.674] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.674] lstrcpynW (in: lpString1=0x432ea0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0074.674] lstrlenW (lpString=",") returned 1 [0074.674] lstrcpynW (in: lpString1=0x40b5f0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0074.674] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.675] lstrcmpiW (lpString1=",", lpString2="^") returned -1 [0074.675] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.675] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.675] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.675] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.675] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.675] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.675] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.675] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.675] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0" [0074.675] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0") returned 51 [0074.675] lstrcpynW (in: lpString1=0x432f06, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0074.675] lstrlenW (lpString=",") returned 1 [0074.675] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0,", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0,") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0," [0074.676] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0,") returned 52 [0074.676] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0,", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0,") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0," [0074.676] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.676] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.676] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.676] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.676] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.676] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.676] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.676] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.677] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.677] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.677] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.677] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.677] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.677] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.677] lstrlenW (lpString="C:\\Windows") returned 10 [0074.677] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.677] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.677] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.678] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.678] lstrlenW (lpString="524386") returned 6 [0074.678] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.678] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.678] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.678] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.678] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.678] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.678] lstrlenW (lpString="6") returned 1 [0074.678] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0074.678] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.678] lstrlenW (lpString="8") returned 1 [0074.678] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0074.678] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0074.678] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0074.678] lstrlenW (lpString="Execute: ") returned 9 [0074.678] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0074.678] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0074.678] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x1b [0074.679] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x1b [0074.679] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x1b, lParam=0x0) returned 0x1 [0074.679] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0074.679] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0074.679] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0074.679] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0074.679] lstrcpynW (in: lpString1=0x432ea0, lpString2="96", iMaxLength=1024 | out: lpString1="96") returned="96" [0074.679] lstrlenW (lpString="96") returned 2 [0074.679] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="104") returned 3 [0074.680] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.680] lstrlenW (lpString="") returned 0 [0074.680] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.680] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.680] lstrcpynW (in: lpString1=0x432ea0, lpString2="104", iMaxLength=1024 | out: lpString1="104") returned="104" [0074.680] lstrlenW (lpString="104") returned 3 [0074.680] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0074.680] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned 1023 [0074.680] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0074.680] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1d0) returned 0x0 [0074.680] RegEnumValueW (in: hKey=0x1d0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0074.680] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.680] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="543760436") returned 9 [0074.680] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1d0, lpdwDisposition=0x0) returned 0x0 [0074.680] RegSetValueExW (in: hKey=0x1d0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0074.681] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.681] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0074.681] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0074.682] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="20692034") returned 8 [0074.682] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.682] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.683] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.683] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.683] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.683] lstrlenW (lpString="0") returned 1 [0074.683] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.683] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.683] lstrlenW (lpString="0") returned 1 [0074.683] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.683] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.683] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.683] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.683] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.683] lstrlenW (lpString="0") returned 1 [0074.683] lstrcpynW (in: lpString1=0x432ea0, lpString2="20692034", iMaxLength=1024 | out: lpString1="20692034") returned="20692034" [0074.683] lstrlenW (lpString="20692034") returned 8 [0074.683] lstrcpynW (in: lpString1=0x40a5f0, lpString2="20692034", iMaxLength=1024 | out: lpString1="20692034") returned="20692034" [0074.683] lstrlenW (lpString="20692034") returned 8 [0074.683] lstrcpynW (in: lpString1=0x46b000, lpString2="20692034", iMaxLength=1024 | out: lpString1="20692034") returned="20692034" [0074.683] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.683] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.683] lstrlenW (lpString="") returned 0 [0074.683] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.683] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.683] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.684] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.684] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0074.684] lstrlenW (lpString="20") returned 2 [0074.684] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0074.684] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.684] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.684] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.684] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.684] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.684] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.684] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.684] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.684] lstrlenW (lpString=" ") returned 1 [0074.684] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.684] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.684] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0074.684] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.684] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.685] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.685] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.685] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.685] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.685] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.685] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.685] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0,", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0,") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0," [0074.685] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0,") returned 52 [0074.685] lstrcpynW (in: lpString1=0x432f08, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.685] lstrlenW (lpString=" ") returned 1 [0074.685] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, " [0074.685] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, ") returned 53 [0074.685] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, " [0074.685] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.685] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.685] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.686] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.686] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.686] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.686] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.686] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.686] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.686] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.686] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.686] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.686] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.686] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.687] lstrlenW (lpString="C:\\Windows") returned 10 [0074.687] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.687] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.687] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.687] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.687] lstrlenW (lpString="524386") returned 6 [0074.687] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.687] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.687] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.687] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.687] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.687] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.687] lstrlenW (lpString="0") returned 1 [0074.687] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0074.687] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.687] lstrlenW (lpString="2") returned 1 [0074.687] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.687] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.687] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.687] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.687] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.687] lstrlenW (lpString="2") returned 1 [0074.688] lstrcpynW (in: lpString1=0x432ea0, lpString2="20692034", iMaxLength=1024 | out: lpString1="20692034") returned="20692034" [0074.688] lstrlenW (lpString="20692034") returned 8 [0074.688] lstrcpynW (in: lpString1=0x40a5f0, lpString2="20692034", iMaxLength=1024 | out: lpString1="20692034") returned="20692034" [0074.688] lstrlenW (lpString="20692034") returned 8 [0074.688] lstrcpynW (in: lpString1=0x46b000, lpString2="692034", iMaxLength=1024 | out: lpString1="692034") returned="692034" [0074.688] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.688] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.688] lstrlenW (lpString="") returned 0 [0074.688] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.688] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.688] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.688] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.688] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0074.688] lstrlenW (lpString="69") returned 2 [0074.688] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0074.688] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.688] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.688] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.688] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.688] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.688] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.688] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.689] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0074.689] lstrlenW (lpString="i") returned 1 [0074.689] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0074.689] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.689] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0074.689] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.689] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.689] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.689] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.689] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.689] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.689] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.689] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.689] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, " [0074.689] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, ") returned 53 [0074.689] lstrcpynW (in: lpString1=0x432f0a, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0074.689] lstrlenW (lpString="i") returned 1 [0074.690] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i" [0074.690] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i") returned 54 [0074.690] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i" [0074.690] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.690] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.690] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.690] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.690] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.690] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.690] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.690] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.690] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.690] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.691] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.691] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.691] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.691] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.691] lstrlenW (lpString="C:\\Windows") returned 10 [0074.691] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.691] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.691] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.691] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.691] lstrlenW (lpString="524386") returned 6 [0074.691] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.691] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.691] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.691] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.692] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.692] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.692] lstrlenW (lpString="2") returned 1 [0074.692] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0074.692] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.692] lstrlenW (lpString="4") returned 1 [0074.692] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.692] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.692] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.692] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.692] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.692] lstrlenW (lpString="4") returned 1 [0074.692] lstrcpynW (in: lpString1=0x432ea0, lpString2="20692034", iMaxLength=1024 | out: lpString1="20692034") returned="20692034" [0074.692] lstrlenW (lpString="20692034") returned 8 [0074.692] lstrcpynW (in: lpString1=0x40a5f0, lpString2="20692034", iMaxLength=1024 | out: lpString1="20692034") returned="20692034" [0074.692] lstrlenW (lpString="20692034") returned 8 [0074.692] lstrcpynW (in: lpString1=0x46b000, lpString2="2034", iMaxLength=1024 | out: lpString1="2034") returned="2034" [0074.692] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.692] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.692] lstrlenW (lpString="") returned 0 [0074.692] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.692] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.692] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.692] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.692] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0074.692] lstrlenW (lpString="20") returned 2 [0074.692] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0074.692] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.693] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.693] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.693] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.693] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.693] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.693] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.693] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.693] lstrlenW (lpString=" ") returned 1 [0074.693] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.693] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.693] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0074.693] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.693] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.693] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.693] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.693] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.694] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.694] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.694] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.694] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i" [0074.694] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i") returned 54 [0074.694] lstrcpynW (in: lpString1=0x432f0c, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.694] lstrlenW (lpString=" ") returned 1 [0074.694] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i " [0074.694] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i ") returned 55 [0074.694] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i " [0074.694] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.694] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.694] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.694] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.694] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.694] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.695] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.695] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.695] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.695] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.695] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.695] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.695] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.695] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.695] lstrlenW (lpString="C:\\Windows") returned 10 [0074.695] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.695] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.696] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.696] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.696] lstrlenW (lpString="524386") returned 6 [0074.696] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.696] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.696] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.696] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.696] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.696] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.696] lstrlenW (lpString="4") returned 1 [0074.696] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0074.696] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.696] lstrlenW (lpString="6") returned 1 [0074.696] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.696] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.696] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.696] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.696] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.696] lstrlenW (lpString="6") returned 1 [0074.696] lstrcpynW (in: lpString1=0x432ea0, lpString2="20692034", iMaxLength=1024 | out: lpString1="20692034") returned="20692034" [0074.696] lstrlenW (lpString="20692034") returned 8 [0074.696] lstrcpynW (in: lpString1=0x40a5f0, lpString2="20692034", iMaxLength=1024 | out: lpString1="20692034") returned="20692034" [0074.696] lstrlenW (lpString="20692034") returned 8 [0074.696] lstrcpynW (in: lpString1=0x46b000, lpString2="34", iMaxLength=1024 | out: lpString1="34") returned="34" [0074.697] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.697] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.697] lstrlenW (lpString="") returned 0 [0074.697] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.697] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.697] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.697] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.697] lstrcpynW (in: lpString1=0x432ea4, lpString2="34", iMaxLength=1024 | out: lpString1="34") returned="34" [0074.697] lstrlenW (lpString="34") returned 2 [0074.697] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="4") returned 1 [0074.697] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.697] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.697] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.697] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.697] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.697] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.697] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.697] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.697] lstrlenW (lpString="4") returned 1 [0074.697] lstrcpynW (in: lpString1=0x40b5f0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.698] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.698] lstrcmpiW (lpString1="4", lpString2="^") returned 1 [0074.698] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.698] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.698] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.698] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.698] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.698] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.698] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.698] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.698] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i " [0074.698] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i ") returned 55 [0074.698] lstrcpynW (in: lpString1=0x432f0e, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.698] lstrlenW (lpString="4") returned 1 [0074.698] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4" [0074.699] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4") returned 56 [0074.699] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4" [0074.699] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.699] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.699] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.699] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.699] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.699] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.699] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.699] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.699] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.699] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.700] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.700] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.700] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.700] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.700] lstrlenW (lpString="C:\\Windows") returned 10 [0074.700] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.700] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.700] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.700] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.700] lstrlenW (lpString="524386") returned 6 [0074.700] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.700] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.700] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.700] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.700] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.700] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.701] lstrlenW (lpString="6") returned 1 [0074.701] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0074.701] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.701] lstrlenW (lpString="8") returned 1 [0074.701] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0074.701] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0074.701] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0074.701] lstrlenW (lpString="Execute: ") returned 9 [0074.701] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0074.701] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0074.701] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x1c [0074.701] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x1c [0074.701] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x1c, lParam=0x0) returned 0x1 [0074.702] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0074.702] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0074.702] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0074.702] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0074.702] lstrcpynW (in: lpString1=0x432ea0, lpString2="104", iMaxLength=1024 | out: lpString1="104") returned="104" [0074.702] lstrlenW (lpString="104") returned 3 [0074.702] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="112") returned 3 [0074.702] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.702] lstrlenW (lpString="") returned 0 [0074.702] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.702] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.702] lstrcpynW (in: lpString1=0x432ea0, lpString2="112", iMaxLength=1024 | out: lpString1="112") returned="112" [0074.702] lstrlenW (lpString="112") returned 3 [0074.702] lstrcpynW (in: lpString1=0x432ea0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0074.703] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0074.703] lstrlenW (lpString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returned 1023 [0074.703] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0074.703] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1d0) returned 0x0 [0074.703] RegEnumValueW (in: hKey=0x1d0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0074.703] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.703] lstrcpynW (in: lpString1=0x432ea4, lpString2="D9A81CBC", iMaxLength=1024 | out: lpString1="D9A81CBC") returned="D9A81CBC" [0074.703] lstrlenW (lpString="D9A81CBC") returned 8 [0074.703] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="740321568") returned 9 [0074.703] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0074.703] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0074.703] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1d0, lpdwDisposition=0x0) returned 0x0 [0074.703] RegSetValueExW (in: hKey=0x1d0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0074.703] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.704] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0074.704] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0074.704] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0074.704] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0074.704] lstrcpynW (in: lpString1=0x432ea0, lpString2="740321568", iMaxLength=1024 | out: lpString1="740321568") returned="740321568" [0074.704] lstrlenW (lpString="740321568") returned 9 [0074.704] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="2C206920") returned 8 [0074.704] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.704] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.704] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.704] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.704] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.705] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.705] lstrlenW (lpString="0") returned 1 [0074.705] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.705] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.705] lstrlenW (lpString="0") returned 1 [0074.705] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.705] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.705] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.705] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.705] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.705] lstrlenW (lpString="0") returned 1 [0074.705] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0074.705] lstrlenW (lpString="2C206920") returned 8 [0074.705] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0074.705] lstrlenW (lpString="2C206920") returned 8 [0074.705] lstrcpynW (in: lpString1=0x46b000, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0074.705] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.705] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.705] lstrlenW (lpString="") returned 0 [0074.705] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.705] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.705] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.705] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.705] lstrcpynW (in: lpString1=0x432ea4, lpString2="2C", iMaxLength=1024 | out: lpString1="2C") returned="2C" [0074.705] lstrlenW (lpString="2C") returned 2 [0074.705] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=",") returned 1 [0074.706] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.706] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.706] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.706] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.706] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.706] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.706] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.706] lstrcpynW (in: lpString1=0x432ea0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0074.706] lstrlenW (lpString=",") returned 1 [0074.706] lstrcpynW (in: lpString1=0x40b5f0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0074.706] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.706] lstrcmpiW (lpString1=",", lpString2="^") returned -1 [0074.706] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.706] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.706] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.706] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.707] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.707] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.707] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.707] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.707] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4" [0074.707] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4") returned 56 [0074.707] lstrcpynW (in: lpString1=0x432f10, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0074.707] lstrlenW (lpString=",") returned 1 [0074.707] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4,", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4,") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4," [0074.707] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4,") returned 57 [0074.707] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4,", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4,") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4," [0074.707] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.707] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.707] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.707] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.707] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.708] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.708] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.708] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.708] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.708] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.708] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.708] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.708] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.708] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.708] lstrlenW (lpString="C:\\Windows") returned 10 [0074.708] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.709] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.709] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.709] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.709] lstrlenW (lpString="524386") returned 6 [0074.709] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.709] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.709] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.709] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.709] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.709] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.709] lstrlenW (lpString="0") returned 1 [0074.709] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0074.709] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.709] lstrlenW (lpString="2") returned 1 [0074.709] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.709] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.709] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.709] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.709] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.709] lstrlenW (lpString="2") returned 1 [0074.709] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0074.709] lstrlenW (lpString="2C206920") returned 8 [0074.709] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0074.710] lstrlenW (lpString="2C206920") returned 8 [0074.710] lstrcpynW (in: lpString1=0x46b000, lpString2="206920", iMaxLength=1024 | out: lpString1="206920") returned="206920" [0074.710] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.710] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.710] lstrlenW (lpString="") returned 0 [0074.710] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.710] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.710] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.710] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.710] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0074.710] lstrlenW (lpString="20") returned 2 [0074.710] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0074.710] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.710] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.710] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.710] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.710] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.710] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.710] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.710] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.710] lstrlenW (lpString=" ") returned 1 [0074.710] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.711] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.711] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0074.711] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.711] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.711] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.711] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.711] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.711] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.713] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.713] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.713] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4,", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4,") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4," [0074.713] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4,") returned 57 [0074.713] lstrcpynW (in: lpString1=0x432f12, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.713] lstrlenW (lpString=" ") returned 1 [0074.713] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, " [0074.713] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, ") returned 58 [0074.713] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, " [0074.713] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.713] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.713] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.713] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.713] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.713] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.713] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.713] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.714] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.714] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.714] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.714] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.714] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.714] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.714] lstrlenW (lpString="C:\\Windows") returned 10 [0074.714] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.714] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.714] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.714] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.714] lstrlenW (lpString="524386") returned 6 [0074.715] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.715] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.715] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.715] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.715] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.715] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.715] lstrlenW (lpString="2") returned 1 [0074.715] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0074.715] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.715] lstrlenW (lpString="4") returned 1 [0074.715] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.715] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.715] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.715] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.715] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.715] lstrlenW (lpString="4") returned 1 [0074.715] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0074.715] lstrlenW (lpString="2C206920") returned 8 [0074.715] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0074.715] lstrlenW (lpString="2C206920") returned 8 [0074.715] lstrcpynW (in: lpString1=0x46b000, lpString2="6920", iMaxLength=1024 | out: lpString1="6920") returned="6920" [0074.715] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.715] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.715] lstrlenW (lpString="") returned 0 [0074.715] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.715] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.715] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.715] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.716] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0074.716] lstrlenW (lpString="69") returned 2 [0074.716] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0074.716] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.716] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.716] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.716] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.716] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.716] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.716] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.716] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0074.716] lstrlenW (lpString="i") returned 1 [0074.716] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0074.716] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.716] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0074.716] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.716] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.716] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.717] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.717] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.717] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.717] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.717] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.717] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, " [0074.717] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, ") returned 58 [0074.717] lstrcpynW (in: lpString1=0x432f14, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0074.717] lstrlenW (lpString="i") returned 1 [0074.717] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i" [0074.717] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i") returned 59 [0074.717] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i" [0074.717] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.717] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.717] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.717] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.718] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.718] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.718] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.718] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.718] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.718] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.718] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.718] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.718] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.718] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.719] lstrlenW (lpString="C:\\Windows") returned 10 [0074.719] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.719] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.719] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.719] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.719] lstrlenW (lpString="524386") returned 6 [0074.719] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.719] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.719] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.719] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.719] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.719] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.719] lstrlenW (lpString="4") returned 1 [0074.719] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0074.719] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.719] lstrlenW (lpString="6") returned 1 [0074.719] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.719] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.719] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.719] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.719] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.719] lstrlenW (lpString="6") returned 1 [0074.719] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0074.719] lstrlenW (lpString="2C206920") returned 8 [0074.720] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0074.720] lstrlenW (lpString="2C206920") returned 8 [0074.720] lstrcpynW (in: lpString1=0x46b000, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0074.720] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.720] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.720] lstrlenW (lpString="") returned 0 [0074.720] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.720] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.720] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.720] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.720] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0074.720] lstrlenW (lpString="20") returned 2 [0074.720] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0074.720] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.720] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.720] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.720] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.720] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.720] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.720] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.720] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.720] lstrlenW (lpString=" ") returned 1 [0074.721] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.721] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.721] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0074.721] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.721] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.721] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.721] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.721] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.721] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.721] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.721] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.721] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i" [0074.721] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i") returned 59 [0074.721] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.722] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.722] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.722] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.722] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.722] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.722] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.722] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.722] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.722] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.722] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.723] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.723] lstrlenW (lpString="C:\\Windows") returned 10 [0074.723] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.723] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.723] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.723] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.723] lstrlenW (lpString="524386") returned 6 [0074.723] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.723] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.723] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.723] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.723] lstrlenW (lpString="6") returned 1 [0074.723] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0074.723] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.723] lstrlenW (lpString="8") returned 1 [0074.723] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0074.723] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0074.723] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0074.723] lstrlenW (lpString="Execute: ") returned 9 [0074.723] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0074.724] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0074.724] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x1d [0074.724] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x1d [0074.724] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x1d, lParam=0x0) returned 0x1 [0074.724] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0074.724] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0074.725] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0074.725] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0074.725] lstrcpynW (in: lpString1=0x432ea0, lpString2="112", iMaxLength=1024 | out: lpString1="112") returned="112" [0074.725] lstrlenW (lpString="112") returned 3 [0074.725] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="120") returned 3 [0074.725] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.725] lstrlenW (lpString="") returned 0 [0074.725] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.725] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.725] lstrcpynW (in: lpString1=0x432ea0, lpString2="120", iMaxLength=1024 | out: lpString1="120") returned="120" [0074.725] lstrlenW (lpString="120") returned 3 [0074.725] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0074.725] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0074.725] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0074.725] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1d0) returned 0x0 [0074.725] RegEnumValueW (in: hKey=0x1d0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0074.725] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.726] lstrcpynW (in: lpString1=0x432ea4, lpString2="C5F04DAC", iMaxLength=1024 | out: lpString1="C5F04DAC") returned="C5F04DAC" [0074.726] lstrlenW (lpString="C5F04DAC") returned 8 [0074.726] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="813185072") returned 9 [0074.726] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0074.726] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0074.726] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1d0, lpdwDisposition=0x0) returned 0x0 [0074.726] RegSetValueExW (in: hKey=0x1d0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0074.726] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.726] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0074.726] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0074.726] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0074.726] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0074.726] lstrcpynW (in: lpString1=0x432ea0, lpString2="813185072", iMaxLength=1024 | out: lpString1="813185072") returned="813185072" [0074.726] lstrlenW (lpString="813185072") returned 9 [0074.726] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="30783830") returned 8 [0074.727] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.727] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.727] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.727] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.727] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.727] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.727] lstrlenW (lpString="0") returned 1 [0074.727] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.727] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.727] lstrlenW (lpString="0") returned 1 [0074.727] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.727] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.727] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.727] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.727] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.727] lstrlenW (lpString="0") returned 1 [0074.727] lstrcpynW (in: lpString1=0x432ea0, lpString2="30783830", iMaxLength=1024 | out: lpString1="30783830") returned="30783830" [0074.727] lstrlenW (lpString="30783830") returned 8 [0074.727] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30783830", iMaxLength=1024 | out: lpString1="30783830") returned="30783830" [0074.727] lstrlenW (lpString="30783830") returned 8 [0074.728] lstrcpynW (in: lpString1=0x46b000, lpString2="30783830", iMaxLength=1024 | out: lpString1="30783830") returned="30783830" [0074.728] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.728] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.728] lstrlenW (lpString="") returned 0 [0074.728] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.728] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.728] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.728] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.728] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0074.728] lstrlenW (lpString="30") returned 2 [0074.728] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0074.728] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.728] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.728] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.728] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.728] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.728] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.728] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.728] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.728] lstrlenW (lpString="0") returned 1 [0074.729] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.729] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.729] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0074.729] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.729] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.729] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.729] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.729] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.729] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.729] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.729] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.729] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i " [0074.729] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i ") returned 60 [0074.729] lstrcpynW (in: lpString1=0x432f18, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.729] lstrlenW (lpString="0") returned 1 [0074.729] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0" [0074.729] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0") returned 61 [0074.730] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0" [0074.730] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.730] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.730] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.730] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.730] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.730] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.730] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.730] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.730] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.730] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.731] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.731] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.731] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.731] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.731] lstrlenW (lpString="C:\\Windows") returned 10 [0074.731] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.731] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.731] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.731] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.731] lstrlenW (lpString="524386") returned 6 [0074.731] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.731] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.731] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.731] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.731] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.731] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.731] lstrlenW (lpString="0") returned 1 [0074.731] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0074.732] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.732] lstrlenW (lpString="2") returned 1 [0074.732] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.732] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.732] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.732] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.732] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.732] lstrlenW (lpString="2") returned 1 [0074.732] lstrcpynW (in: lpString1=0x432ea0, lpString2="30783830", iMaxLength=1024 | out: lpString1="30783830") returned="30783830" [0074.732] lstrlenW (lpString="30783830") returned 8 [0074.732] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30783830", iMaxLength=1024 | out: lpString1="30783830") returned="30783830" [0074.732] lstrlenW (lpString="30783830") returned 8 [0074.732] lstrcpynW (in: lpString1=0x46b000, lpString2="783830", iMaxLength=1024 | out: lpString1="783830") returned="783830" [0074.732] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.732] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.732] lstrlenW (lpString="") returned 0 [0074.732] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.732] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.732] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.732] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.732] lstrcpynW (in: lpString1=0x432ea4, lpString2="78", iMaxLength=1024 | out: lpString1="78") returned="78" [0074.732] lstrlenW (lpString="78") returned 2 [0074.732] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="x") returned 1 [0074.732] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.732] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.732] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.733] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.733] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.733] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.733] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.733] lstrcpynW (in: lpString1=0x432ea0, lpString2="x", iMaxLength=1024 | out: lpString1="x") returned="x" [0074.733] lstrlenW (lpString="x") returned 1 [0074.733] lstrcpynW (in: lpString1=0x40b5f0, lpString2="x", iMaxLength=1024 | out: lpString1="x") returned="x" [0074.733] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.733] lstrcmpiW (lpString1="x", lpString2="^") returned 1 [0074.733] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.733] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.733] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.733] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.733] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.733] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.734] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.734] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.734] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0" [0074.734] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0") returned 61 [0074.734] lstrcpynW (in: lpString1=0x432f1a, lpString2="x", iMaxLength=1024 | out: lpString1="x") returned="x" [0074.734] lstrlenW (lpString="x") returned 1 [0074.734] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x" [0074.734] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x") returned 62 [0074.734] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x" [0074.734] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.734] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.734] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.734] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.734] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.734] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.735] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.735] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.735] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.735] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.735] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.735] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.735] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.735] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.735] lstrlenW (lpString="C:\\Windows") returned 10 [0074.735] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.735] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.736] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.736] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.736] lstrlenW (lpString="524386") returned 6 [0074.736] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.736] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.736] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.736] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.736] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.736] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.736] lstrlenW (lpString="2") returned 1 [0074.736] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0074.736] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.736] lstrlenW (lpString="4") returned 1 [0074.736] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.736] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.736] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.736] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.736] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.736] lstrlenW (lpString="4") returned 1 [0074.736] lstrcpynW (in: lpString1=0x432ea0, lpString2="30783830", iMaxLength=1024 | out: lpString1="30783830") returned="30783830" [0074.736] lstrlenW (lpString="30783830") returned 8 [0074.736] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30783830", iMaxLength=1024 | out: lpString1="30783830") returned="30783830" [0074.736] lstrlenW (lpString="30783830") returned 8 [0074.736] lstrcpynW (in: lpString1=0x46b000, lpString2="3830", iMaxLength=1024 | out: lpString1="3830") returned="3830" [0074.737] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.737] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.737] lstrlenW (lpString="") returned 0 [0074.737] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.737] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.737] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.737] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.737] lstrcpynW (in: lpString1=0x432ea4, lpString2="38", iMaxLength=1024 | out: lpString1="38") returned="38" [0074.737] lstrlenW (lpString="38") returned 2 [0074.737] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="8") returned 1 [0074.737] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.737] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.737] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.737] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.737] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.737] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.737] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.737] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.737] lstrlenW (lpString="8") returned 1 [0074.737] lstrcpynW (in: lpString1=0x40b5f0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.737] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.738] lstrcmpiW (lpString1="8", lpString2="^") returned 1 [0074.738] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.738] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.738] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.738] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.738] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.738] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.738] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.738] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.738] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x" [0074.738] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x") returned 62 [0074.738] lstrcpynW (in: lpString1=0x432f1c, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.738] lstrlenW (lpString="8") returned 1 [0074.738] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x8", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x8") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x8" [0074.738] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x8") returned 63 [0074.739] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x8", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x8") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x8" [0074.739] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.739] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.739] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.739] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.739] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.739] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.739] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.739] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.739] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.739] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.740] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.740] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.740] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.740] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.740] lstrlenW (lpString="C:\\Windows") returned 10 [0074.740] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.740] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.740] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.740] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.740] lstrlenW (lpString="524386") returned 6 [0074.740] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.740] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.740] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.740] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.740] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.741] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.741] lstrlenW (lpString="4") returned 1 [0074.741] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0074.741] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.741] lstrlenW (lpString="6") returned 1 [0074.741] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.741] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.741] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.741] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.741] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.741] lstrlenW (lpString="6") returned 1 [0074.741] lstrcpynW (in: lpString1=0x432ea0, lpString2="30783830", iMaxLength=1024 | out: lpString1="30783830") returned="30783830" [0074.741] lstrlenW (lpString="30783830") returned 8 [0074.741] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30783830", iMaxLength=1024 | out: lpString1="30783830") returned="30783830" [0074.741] lstrlenW (lpString="30783830") returned 8 [0074.741] lstrcpynW (in: lpString1=0x46b000, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0074.741] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.741] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.741] lstrlenW (lpString="") returned 0 [0074.741] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.741] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.741] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.741] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.741] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0074.741] lstrlenW (lpString="30") returned 2 [0074.741] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0074.741] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.741] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.742] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.742] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.742] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.742] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.742] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.742] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.742] lstrlenW (lpString="0") returned 1 [0074.742] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.742] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.742] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0074.742] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.742] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.742] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.742] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.742] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.743] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.743] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.743] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.743] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x8", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x8") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x8" [0074.743] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x8") returned 63 [0074.743] lstrcpynW (in: lpString1=0x432f1e, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.743] lstrlenW (lpString="0") returned 1 [0074.743] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80" [0074.743] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80") returned 64 [0074.743] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80" [0074.743] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.743] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.743] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.743] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.748] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.748] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.748] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.748] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.748] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.749] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.749] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.749] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.749] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.749] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.749] lstrlenW (lpString="C:\\Windows") returned 10 [0074.749] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.749] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.749] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.749] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.749] lstrlenW (lpString="524386") returned 6 [0074.749] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.749] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.749] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.750] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.750] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.750] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.750] lstrlenW (lpString="6") returned 1 [0074.750] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0074.750] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.750] lstrlenW (lpString="8") returned 1 [0074.750] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0074.750] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0074.750] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0074.750] lstrlenW (lpString="Execute: ") returned 9 [0074.750] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0074.750] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0074.750] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x1e [0074.750] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x1e [0074.751] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x1e, lParam=0x0) returned 0x1 [0074.751] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0074.751] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0074.751] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0074.751] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0074.751] lstrcpynW (in: lpString1=0x432ea0, lpString2="120", iMaxLength=1024 | out: lpString1="120") returned="120" [0074.751] lstrlenW (lpString="120") returned 3 [0074.751] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="128") returned 3 [0074.751] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.751] lstrlenW (lpString="") returned 0 [0074.751] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.751] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.752] lstrcpynW (in: lpString1=0x432ea0, lpString2="128", iMaxLength=1024 | out: lpString1="128") returned="128" [0074.752] lstrlenW (lpString="128") returned 3 [0074.752] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0074.752] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0074.752] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0074.752] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1d0) returned 0x0 [0074.752] RegEnumValueW (in: hKey=0x1d0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0074.752] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.752] lstrcpynW (in: lpString1=0x432ea4, lpString2="D9A81CBC", iMaxLength=1024 | out: lpString1="D9A81CBC") returned="D9A81CBC" [0074.752] lstrlenW (lpString="D9A81CBC") returned 8 [0074.752] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="740321568") returned 9 [0074.752] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0074.752] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0074.752] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1d0, lpdwDisposition=0x0) returned 0x0 [0074.753] RegSetValueExW (in: hKey=0x1d0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0074.753] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.753] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0074.753] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0074.753] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0074.753] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0074.753] lstrcpynW (in: lpString1=0x432ea0, lpString2="740321568", iMaxLength=1024 | out: lpString1="740321568") returned="740321568" [0074.753] lstrlenW (lpString="740321568") returned 9 [0074.753] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="2C206920") returned 8 [0074.753] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.753] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.753] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.754] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.754] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.754] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.754] lstrlenW (lpString="0") returned 1 [0074.754] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.754] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.754] lstrlenW (lpString="0") returned 1 [0074.754] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.754] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.754] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.754] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.754] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.754] lstrlenW (lpString="0") returned 1 [0074.754] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0074.754] lstrlenW (lpString="2C206920") returned 8 [0074.754] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0074.754] lstrlenW (lpString="2C206920") returned 8 [0074.754] lstrcpynW (in: lpString1=0x46b000, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0074.754] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.754] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.754] lstrlenW (lpString="") returned 0 [0074.754] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.754] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.754] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.755] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.755] lstrcpynW (in: lpString1=0x432ea4, lpString2="2C", iMaxLength=1024 | out: lpString1="2C") returned="2C" [0074.755] lstrlenW (lpString="2C") returned 2 [0074.755] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=",") returned 1 [0074.755] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.755] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.755] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.755] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.755] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.755] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.755] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.755] lstrcpynW (in: lpString1=0x432ea0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0074.755] lstrlenW (lpString=",") returned 1 [0074.755] lstrcpynW (in: lpString1=0x40b5f0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0074.755] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.755] lstrcmpiW (lpString1=",", lpString2="^") returned -1 [0074.755] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.755] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.756] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.756] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.756] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.756] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.756] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.756] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.756] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80" [0074.756] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80") returned 64 [0074.756] lstrcpynW (in: lpString1=0x432f20, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0074.756] lstrlenW (lpString=",") returned 1 [0074.756] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80,", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80,") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80," [0074.756] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80,") returned 65 [0074.756] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80,", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80,") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80," [0074.756] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.757] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.757] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.757] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.757] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.757] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.757] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.757] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.757] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.757] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.757] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.758] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.758] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.758] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.758] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.758] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.758] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.758] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.758] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.758] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.758] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.758] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.758] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.758] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0074.758] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.759] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.759] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.759] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.759] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.759] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.759] lstrlenW (lpString="2") returned 1 [0074.759] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0074.759] lstrlenW (lpString="2C206920") returned 8 [0074.759] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0074.759] lstrlenW (lpString="2C206920") returned 8 [0074.759] lstrcpynW (in: lpString1=0x46b000, lpString2="206920", iMaxLength=1024 | out: lpString1="206920") returned="206920" [0074.759] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.759] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.759] lstrlenW (lpString="") returned 0 [0074.759] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.759] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.759] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.759] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.759] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0074.759] lstrlenW (lpString="20") returned 2 [0074.760] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0074.760] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.760] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.760] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.760] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.760] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.760] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.760] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.760] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.760] lstrlenW (lpString=" ") returned 1 [0074.760] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.760] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.760] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0074.760] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.761] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.761] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.761] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.761] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.761] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.761] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.761] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.761] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80,", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80,") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80," [0074.761] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80,") returned 65 [0074.761] lstrcpynW (in: lpString1=0x432f22, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.761] lstrlenW (lpString=" ") returned 1 [0074.761] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, " [0074.761] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, ") returned 66 [0074.762] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, " [0074.762] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.762] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.762] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.762] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.762] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.762] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.762] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.762] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.762] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.762] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.763] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.763] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.763] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.763] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.763] lstrlenW (lpString="C:\\Windows") returned 10 [0074.763] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.763] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.763] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.763] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.763] lstrlenW (lpString="524386") returned 6 [0074.763] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.763] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.763] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.763] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.764] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.764] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.764] lstrlenW (lpString="2") returned 1 [0074.764] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0074.764] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.764] lstrlenW (lpString="4") returned 1 [0074.764] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.764] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.764] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.764] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.764] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.764] lstrlenW (lpString="4") returned 1 [0074.764] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0074.764] lstrlenW (lpString="2C206920") returned 8 [0074.764] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0074.764] lstrlenW (lpString="2C206920") returned 8 [0074.764] lstrcpynW (in: lpString1=0x46b000, lpString2="6920", iMaxLength=1024 | out: lpString1="6920") returned="6920" [0074.764] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.764] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.764] lstrlenW (lpString="") returned 0 [0074.764] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.764] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.764] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.764] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.765] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0074.765] lstrlenW (lpString="69") returned 2 [0074.765] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0074.765] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.765] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.765] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.765] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.765] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.765] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.765] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.765] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0074.765] lstrlenW (lpString="i") returned 1 [0074.765] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0074.765] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.765] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0074.765] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.765] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.765] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.766] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.766] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.766] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.766] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.766] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.766] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, " [0074.766] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, ") returned 66 [0074.766] lstrcpynW (in: lpString1=0x432f24, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0074.766] lstrlenW (lpString="i") returned 1 [0074.766] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i" [0074.766] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i") returned 67 [0074.766] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i" [0074.766] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.766] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.766] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.766] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.767] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.767] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.767] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.767] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.767] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.767] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.767] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.767] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.767] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.768] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.768] lstrlenW (lpString="C:\\Windows") returned 10 [0074.768] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.768] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.768] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.768] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.768] lstrlenW (lpString="524386") returned 6 [0074.768] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.768] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.768] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.768] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.768] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.768] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.769] lstrlenW (lpString="4") returned 1 [0074.769] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0074.769] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.769] lstrlenW (lpString="6") returned 1 [0074.769] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.769] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.769] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.769] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.769] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.769] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0074.769] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.769] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.769] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.769] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.769] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0074.769] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.769] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.770] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.770] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.770] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.770] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.770] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.770] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.770] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i" [0074.770] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i") returned 67 [0074.770] lstrcpynW (in: lpString1=0x432f26, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.770] lstrlenW (lpString=" ") returned 1 [0074.770] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i " [0074.770] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i ") returned 68 [0074.770] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i " [0074.770] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.770] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.771] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.771] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.771] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.771] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.771] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.771] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.771] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.771] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.771] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.771] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.771] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.772] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.772] lstrlenW (lpString="C:\\Windows") returned 10 [0074.772] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.772] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.772] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.772] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.772] lstrlenW (lpString="524386") returned 6 [0074.772] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.772] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.772] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.772] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.772] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.772] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.772] lstrlenW (lpString="6") returned 1 [0074.772] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0074.772] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.772] lstrlenW (lpString="8") returned 1 [0074.772] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0074.773] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0074.773] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0074.773] lstrlenW (lpString="Execute: ") returned 9 [0074.773] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0074.773] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0074.773] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x1f [0074.773] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x1f [0074.773] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x1f, lParam=0x0) returned 0x1 [0074.774] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0074.774] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0074.774] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0074.774] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0074.774] lstrcpynW (in: lpString1=0x432ea0, lpString2="128", iMaxLength=1024 | out: lpString1="128") returned="128" [0074.774] lstrlenW (lpString="128") returned 3 [0074.774] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="136") returned 3 [0074.774] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.774] lstrlenW (lpString="") returned 0 [0074.774] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.774] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.774] lstrcpynW (in: lpString1=0x432ea0, lpString2="136", iMaxLength=1024 | out: lpString1="136") returned="136" [0074.774] lstrlenW (lpString="136") returned 3 [0074.774] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0074.775] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0074.775] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0074.775] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1d0) returned 0x0 [0074.776] RegEnumValueW (in: hKey=0x1d0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0074.776] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.776] lstrcpynW (in: lpString1=0x432ea4, lpString2="C5A11CB2", iMaxLength=1024 | out: lpString1="C5A11CB2") returned="C5A11CB2" [0074.776] lstrlenW (lpString="C5A11CB2") returned 8 [0074.776] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="808020270") returned 9 [0074.776] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0074.776] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0074.776] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1d0, lpdwDisposition=0x0) returned 0x0 [0074.776] RegSetValueExW (in: hKey=0x1d0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0074.776] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.776] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0074.776] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0074.776] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0074.777] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0074.777] lstrcpynW (in: lpString1=0x432ea0, lpString2="808020270", iMaxLength=1024 | out: lpString1="808020270") returned="808020270" [0074.777] lstrlenW (lpString="808020270") returned 9 [0074.777] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="3029692E") returned 8 [0074.777] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.777] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.777] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.777] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.777] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.777] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.777] lstrlenW (lpString="0") returned 1 [0074.777] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.777] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.777] lstrlenW (lpString="0") returned 1 [0074.777] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.777] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.777] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.778] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.778] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.778] lstrlenW (lpString="0") returned 1 [0074.778] lstrcpynW (in: lpString1=0x432ea0, lpString2="3029692E", iMaxLength=1024 | out: lpString1="3029692E") returned="3029692E" [0074.778] lstrlenW (lpString="3029692E") returned 8 [0074.778] lstrcpynW (in: lpString1=0x40a5f0, lpString2="3029692E", iMaxLength=1024 | out: lpString1="3029692E") returned="3029692E" [0074.778] lstrlenW (lpString="3029692E") returned 8 [0074.778] lstrcpynW (in: lpString1=0x46b000, lpString2="3029692E", iMaxLength=1024 | out: lpString1="3029692E") returned="3029692E" [0074.778] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.778] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.778] lstrlenW (lpString="") returned 0 [0074.778] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.778] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.778] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.778] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.778] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0074.778] lstrlenW (lpString="30") returned 2 [0074.778] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0074.778] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.778] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.778] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.778] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.779] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.779] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.779] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.779] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.779] lstrlenW (lpString="0") returned 1 [0074.779] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.779] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.779] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0074.779] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.779] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.779] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.779] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.779] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.779] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.780] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.780] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.780] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i " [0074.780] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i ") returned 68 [0074.780] lstrcpynW (in: lpString1=0x432f28, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.780] lstrlenW (lpString="0") returned 1 [0074.780] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0" [0074.780] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0") returned 69 [0074.780] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0" [0074.780] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.780] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.780] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.780] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.780] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.780] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.780] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.780] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.781] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.781] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.781] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.781] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.781] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.781] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.781] lstrlenW (lpString="C:\\Windows") returned 10 [0074.781] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.781] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.781] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.781] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.782] lstrlenW (lpString="524386") returned 6 [0074.782] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.782] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.782] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.782] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.782] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.782] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.782] lstrlenW (lpString="0") returned 1 [0074.782] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0074.782] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.782] lstrlenW (lpString="2") returned 1 [0074.782] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.782] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.782] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.782] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.782] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.782] lstrlenW (lpString="2") returned 1 [0074.782] lstrcpynW (in: lpString1=0x432ea0, lpString2="3029692E", iMaxLength=1024 | out: lpString1="3029692E") returned="3029692E" [0074.782] lstrlenW (lpString="3029692E") returned 8 [0074.782] lstrcpynW (in: lpString1=0x40a5f0, lpString2="3029692E", iMaxLength=1024 | out: lpString1="3029692E") returned="3029692E" [0074.782] lstrlenW (lpString="3029692E") returned 8 [0074.782] lstrcpynW (in: lpString1=0x46b000, lpString2="29692E", iMaxLength=1024 | out: lpString1="29692E") returned="29692E" [0074.782] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.782] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.782] lstrlenW (lpString="") returned 0 [0074.782] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.782] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.783] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.783] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.783] lstrcpynW (in: lpString1=0x432ea4, lpString2="29", iMaxLength=1024 | out: lpString1="29") returned="29" [0074.783] lstrlenW (lpString="29") returned 2 [0074.783] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=")") returned 1 [0074.783] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.783] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.783] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.783] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.783] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.783] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.783] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.783] lstrcpynW (in: lpString1=0x432ea0, lpString2=")", iMaxLength=1024 | out: lpString1=")") returned=")" [0074.783] lstrlenW (lpString=")") returned 1 [0074.783] lstrcpynW (in: lpString1=0x40b5f0, lpString2=")", iMaxLength=1024 | out: lpString1=")") returned=")" [0074.783] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.783] lstrcmpiW (lpString1=")", lpString2="^") returned -1 [0074.783] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.783] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.783] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.784] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.784] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.784] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.784] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.784] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.784] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0" [0074.784] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0") returned 69 [0074.784] lstrcpynW (in: lpString1=0x432f2a, lpString2=")", iMaxLength=1024 | out: lpString1=")") returned=")" [0074.784] lstrlenW (lpString=")") returned 1 [0074.784] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)" [0074.784] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)") returned 70 [0074.784] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)" [0074.784] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.784] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.784] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.785] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.785] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.785] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.785] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.785] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.785] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.785] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.785] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.785] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.785] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.786] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.786] lstrlenW (lpString="C:\\Windows") returned 10 [0074.786] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.786] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.786] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.786] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.786] lstrlenW (lpString="524386") returned 6 [0074.786] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.786] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.786] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.786] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.786] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.786] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.786] lstrlenW (lpString="2") returned 1 [0074.786] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0074.786] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.786] lstrlenW (lpString="4") returned 1 [0074.786] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.786] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.786] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.786] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.786] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.787] lstrlenW (lpString="4") returned 1 [0074.787] lstrcpynW (in: lpString1=0x432ea0, lpString2="3029692E", iMaxLength=1024 | out: lpString1="3029692E") returned="3029692E" [0074.787] lstrlenW (lpString="3029692E") returned 8 [0074.787] lstrcpynW (in: lpString1=0x40a5f0, lpString2="3029692E", iMaxLength=1024 | out: lpString1="3029692E") returned="3029692E" [0074.787] lstrlenW (lpString="3029692E") returned 8 [0074.787] lstrcpynW (in: lpString1=0x46b000, lpString2="692E", iMaxLength=1024 | out: lpString1="692E") returned="692E" [0074.787] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.787] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.787] lstrlenW (lpString="") returned 0 [0074.787] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.787] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.787] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.787] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.787] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0074.787] lstrlenW (lpString="69") returned 2 [0074.787] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0074.787] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.787] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.787] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.787] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.787] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.787] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.788] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.788] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0074.788] lstrlenW (lpString="i") returned 1 [0074.788] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0074.788] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.788] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0074.788] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.788] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.788] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.788] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.788] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.788] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.788] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.788] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.788] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)" [0074.789] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)") returned 70 [0074.789] lstrcpynW (in: lpString1=0x432f2c, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0074.789] lstrlenW (lpString="i") returned 1 [0074.789] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i" [0074.789] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i") returned 71 [0074.789] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i" [0074.789] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.789] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.789] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.789] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.789] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.789] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.789] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.789] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.789] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.790] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.790] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.790] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.790] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.790] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.790] lstrlenW (lpString="C:\\Windows") returned 10 [0074.790] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.790] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.792] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.792] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.792] lstrlenW (lpString="524386") returned 6 [0074.792] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.792] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.792] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.792] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.792] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.792] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.792] lstrlenW (lpString="4") returned 1 [0074.792] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0074.792] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.792] lstrlenW (lpString="6") returned 1 [0074.792] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.792] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.793] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.793] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.793] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.793] lstrlenW (lpString="6") returned 1 [0074.793] lstrcpynW (in: lpString1=0x432ea0, lpString2="3029692E", iMaxLength=1024 | out: lpString1="3029692E") returned="3029692E" [0074.793] lstrlenW (lpString="3029692E") returned 8 [0074.793] lstrcpynW (in: lpString1=0x40a5f0, lpString2="3029692E", iMaxLength=1024 | out: lpString1="3029692E") returned="3029692E" [0074.793] lstrlenW (lpString="3029692E") returned 8 [0074.793] lstrcpynW (in: lpString1=0x46b000, lpString2="2E", iMaxLength=1024 | out: lpString1="2E") returned="2E" [0074.793] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.793] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.793] lstrlenW (lpString="") returned 0 [0074.793] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.793] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.793] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.793] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.793] lstrcpynW (in: lpString1=0x432ea4, lpString2="2E", iMaxLength=1024 | out: lpString1="2E") returned="2E" [0074.793] lstrlenW (lpString="2E") returned 2 [0074.793] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=".") returned 1 [0074.793] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.793] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.793] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33b008 [0074.794] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.794] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.794] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.794] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.794] lstrcpynW (in: lpString1=0x432ea0, lpString2=".", iMaxLength=1024 | out: lpString1=".") returned="." [0074.794] lstrlenW (lpString=".") returned 1 [0074.794] lstrcpynW (in: lpString1=0x40b5f0, lpString2=".", iMaxLength=1024 | out: lpString1=".") returned="." [0074.794] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.794] lstrcmpiW (lpString1=".", lpString2="^") returned -1 [0074.794] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.794] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.794] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.794] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.794] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.794] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.795] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.795] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.795] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i" [0074.795] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i") returned 71 [0074.795] lstrcpynW (in: lpString1=0x432f2e, lpString2=".", iMaxLength=1024 | out: lpString1=".") returned="." [0074.795] lstrlenW (lpString=".") returned 1 [0074.795] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i." [0074.795] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.") returned 72 [0074.795] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i." [0074.795] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.795] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.795] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.795] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.795] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.795] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.795] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.796] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.796] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.796] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33b008 [0074.796] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.796] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.796] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33b008 [0074.796] FindClose (in: hFindFile=0x33b008 | out: hFindFile=0x33b008) returned 1 [0074.796] lstrlenW (lpString="C:\\Windows") returned 10 [0074.796] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.796] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.796] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.797] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.797] lstrlenW (lpString="524386") returned 6 [0074.797] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.797] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.797] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.797] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.797] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.797] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.797] lstrlenW (lpString="6") returned 1 [0074.797] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0074.797] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.797] lstrlenW (lpString="8") returned 1 [0074.797] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0074.797] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0074.797] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0074.797] lstrlenW (lpString="Execute: ") returned 9 [0074.797] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0074.797] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0074.797] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x20 [0074.798] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x20 [0074.798] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x20, lParam=0x0) returned 0x1 [0074.798] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0074.798] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0074.798] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0074.798] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0074.798] lstrcpynW (in: lpString1=0x432ea0, lpString2="136", iMaxLength=1024 | out: lpString1="136") returned="136" [0074.798] lstrlenW (lpString="136") returned 3 [0074.799] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="144") returned 3 [0074.799] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.799] lstrlenW (lpString="") returned 0 [0074.799] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.799] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.799] lstrcpynW (in: lpString1=0x432ea0, lpString2="144", iMaxLength=1024 | out: lpString1="144") returned="144" [0074.799] lstrlenW (lpString="144") returned 3 [0074.799] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0074.799] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0074.799] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0074.799] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1d0) returned 0x0 [0074.799] RegEnumValueW (in: hKey=0x1d0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0074.799] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.799] lstrcpynW (in: lpString1=0x432ea4, lpString2="87BD55C2", iMaxLength=1024 | out: lpString1="87BD55C2") returned="87BD55C2" [0074.799] lstrlenW (lpString="87BD55C2") returned 8 [0074.799] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1916084318") returned 10 [0074.799] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0074.800] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0074.800] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1d0, lpdwDisposition=0x0) returned 0x0 [0074.800] RegSetValueExW (in: hKey=0x1d0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0074.800] RegCloseKey (hKey=0x1d0) returned 0x0 [0074.800] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0074.800] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0074.800] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0074.800] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0074.800] lstrcpynW (in: lpString1=0x432ea0, lpString2="1916084318", iMaxLength=1024 | out: lpString1="1916084318") returned="1916084318" [0074.800] lstrlenW (lpString="1916084318") returned 10 [0074.800] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="7235205E") returned 8 [0074.800] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.800] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.801] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.801] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.801] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.801] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.801] lstrlenW (lpString="0") returned 1 [0074.801] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.801] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.801] lstrlenW (lpString="0") returned 1 [0074.801] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.801] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.801] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.801] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.801] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.801] lstrlenW (lpString="0") returned 1 [0074.801] lstrcpynW (in: lpString1=0x432ea0, lpString2="7235205E", iMaxLength=1024 | out: lpString1="7235205E") returned="7235205E" [0074.801] lstrlenW (lpString="7235205E") returned 8 [0074.801] lstrcpynW (in: lpString1=0x40a5f0, lpString2="7235205E", iMaxLength=1024 | out: lpString1="7235205E") returned="7235205E" [0074.801] lstrlenW (lpString="7235205E") returned 8 [0074.801] lstrcpynW (in: lpString1=0x46b000, lpString2="7235205E", iMaxLength=1024 | out: lpString1="7235205E") returned="7235205E" [0074.801] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.801] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.801] lstrlenW (lpString="") returned 0 [0074.802] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.802] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.802] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.802] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.802] lstrcpynW (in: lpString1=0x432ea4, lpString2="72", iMaxLength=1024 | out: lpString1="72") returned="72" [0074.802] lstrlenW (lpString="72") returned 2 [0074.802] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="r") returned 1 [0074.802] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.802] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.802] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0074.802] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.802] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.802] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.802] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.802] lstrcpynW (in: lpString1=0x432ea0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0074.802] lstrlenW (lpString="r") returned 1 [0074.802] lstrcpynW (in: lpString1=0x40b5f0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0074.802] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.802] lstrcmpiW (lpString1="r", lpString2="^") returned 1 [0074.802] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.803] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.803] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.803] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.803] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.803] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.803] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.803] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.803] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i." [0074.803] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.") returned 72 [0074.803] lstrcpynW (in: lpString1=0x432f30, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0074.803] lstrlenW (lpString="r") returned 1 [0074.803] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.r", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.r") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.r" [0074.803] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.r") returned 73 [0074.803] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.r", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.r") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.r" [0074.803] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.803] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.804] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.804] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.804] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.804] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.804] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.804] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.804] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.804] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0074.804] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.804] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.804] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0074.805] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.805] lstrlenW (lpString="C:\\Windows") returned 10 [0074.805] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.805] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.805] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.805] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.805] lstrlenW (lpString="524386") returned 6 [0074.805] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.805] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.805] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.805] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.805] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.805] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.805] lstrlenW (lpString="0") returned 1 [0074.805] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0074.805] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.805] lstrlenW (lpString="2") returned 1 [0074.805] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.805] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.806] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.806] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.806] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.806] lstrlenW (lpString="2") returned 1 [0074.806] lstrcpynW (in: lpString1=0x432ea0, lpString2="7235205E", iMaxLength=1024 | out: lpString1="7235205E") returned="7235205E" [0074.806] lstrlenW (lpString="7235205E") returned 8 [0074.806] lstrcpynW (in: lpString1=0x40a5f0, lpString2="7235205E", iMaxLength=1024 | out: lpString1="7235205E") returned="7235205E" [0074.806] lstrlenW (lpString="7235205E") returned 8 [0074.806] lstrcpynW (in: lpString1=0x46b000, lpString2="35205E", iMaxLength=1024 | out: lpString1="35205E") returned="35205E" [0074.806] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.806] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.806] lstrlenW (lpString="") returned 0 [0074.806] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.806] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.806] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.806] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.806] lstrcpynW (in: lpString1=0x432ea4, lpString2="35", iMaxLength=1024 | out: lpString1="35") returned="35" [0074.807] lstrlenW (lpString="35") returned 2 [0074.807] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="5") returned 1 [0074.807] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.807] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.807] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0074.807] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.807] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.807] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.807] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.807] lstrcpynW (in: lpString1=0x432ea0, lpString2="5", iMaxLength=1024 | out: lpString1="5") returned="5" [0074.807] lstrlenW (lpString="5") returned 1 [0074.807] lstrcpynW (in: lpString1=0x40b5f0, lpString2="5", iMaxLength=1024 | out: lpString1="5") returned="5" [0074.807] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.807] lstrcmpiW (lpString1="5", lpString2="^") returned 1 [0074.807] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.807] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.807] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.807] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.808] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.808] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.808] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.808] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.808] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.r", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.r") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.r" [0074.808] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.r") returned 73 [0074.808] lstrcpynW (in: lpString1=0x432f32, lpString2="5", iMaxLength=1024 | out: lpString1="5") returned="5" [0074.808] lstrlenW (lpString="5") returned 1 [0074.808] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.r5", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.r5") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.r5" [0074.808] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.r5") returned 74 [0074.808] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.r5", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.r5") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.r5" [0074.808] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.808] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.808] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.808] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.809] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.809] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.809] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.809] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.809] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.809] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0074.809] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.809] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.809] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0074.809] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.810] lstrlenW (lpString="C:\\Windows") returned 10 [0074.810] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.810] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.810] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.810] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.810] lstrlenW (lpString="524386") returned 6 [0074.810] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.810] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.810] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.810] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.810] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.810] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.810] lstrlenW (lpString="2") returned 1 [0074.810] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0074.810] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.810] lstrlenW (lpString="4") returned 1 [0074.810] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.810] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.810] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.810] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.810] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.810] lstrlenW (lpString="4") returned 1 [0074.810] lstrcpynW (in: lpString1=0x432ea0, lpString2="7235205E", iMaxLength=1024 | out: lpString1="7235205E") returned="7235205E" [0074.811] lstrlenW (lpString="7235205E") returned 8 [0074.811] lstrcpynW (in: lpString1=0x40a5f0, lpString2="7235205E", iMaxLength=1024 | out: lpString1="7235205E") returned="7235205E" [0074.811] lstrlenW (lpString="7235205E") returned 8 [0074.811] lstrcpynW (in: lpString1=0x46b000, lpString2="205E", iMaxLength=1024 | out: lpString1="205E") returned="205E" [0074.811] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.811] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.811] lstrlenW (lpString="") returned 0 [0074.811] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.811] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.811] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.811] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.811] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0074.811] lstrlenW (lpString="20") returned 2 [0074.811] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0074.811] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.811] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.811] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0074.811] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.811] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.811] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.811] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.811] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.812] lstrlenW (lpString=" ") returned 1 [0074.812] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0074.812] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.812] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0074.812] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.812] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.812] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.812] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.812] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.812] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.813] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.813] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.813] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.814] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.814] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.814] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.814] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.814] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.814] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0074.814] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.814] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.814] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0074.814] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.814] lstrlenW (lpString="C:\\Windows") returned 10 [0074.815] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.815] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.815] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.815] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.815] lstrlenW (lpString="524386") returned 6 [0074.815] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.815] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.815] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.815] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.815] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.815] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.815] lstrlenW (lpString="4") returned 1 [0074.815] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0074.815] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.815] lstrlenW (lpString="6") returned 1 [0074.815] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.815] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.815] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.815] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.815] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.815] lstrlenW (lpString="6") returned 1 [0074.815] lstrcpynW (in: lpString1=0x432ea0, lpString2="7235205E", iMaxLength=1024 | out: lpString1="7235205E") returned="7235205E" [0074.816] lstrlenW (lpString="7235205E") returned 8 [0074.816] lstrcpynW (in: lpString1=0x40a5f0, lpString2="7235205E", iMaxLength=1024 | out: lpString1="7235205E") returned="7235205E" [0074.816] lstrlenW (lpString="7235205E") returned 8 [0074.816] lstrcpynW (in: lpString1=0x46b000, lpString2="5E", iMaxLength=1024 | out: lpString1="5E") returned="5E" [0074.816] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.816] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.816] lstrlenW (lpString="") returned 0 [0074.816] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.816] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.816] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.816] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.816] lstrcpynW (in: lpString1=0x432ea4, lpString2="5E", iMaxLength=1024 | out: lpString1="5E") returned="5E" [0074.816] lstrlenW (lpString="5E") returned 2 [0074.816] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="^") returned 1 [0074.816] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.816] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.816] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0074.816] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.816] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.816] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.816] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.817] lstrcpynW (in: lpString1=0x432ea0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.817] lstrlenW (lpString="^") returned 1 [0074.817] lstrcpynW (in: lpString1=0x40b5f0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.817] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.817] lstrcmpiW (lpString1="^", lpString2="^") returned 0 [0074.817] lstrcpynW (in: lpString1=0x432ea0, lpString2="144", iMaxLength=1024 | out: lpString1="144") returned="144" [0074.817] lstrlenW (lpString="144") returned 3 [0074.817] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.817] lstrlenW (lpString="6") returned 1 [0074.817] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="150") returned 3 [0074.817] lstrcpynW (in: lpString1=0x432ea0, lpString2="150", iMaxLength=1024 | out: lpString1="150") returned="150" [0074.817] lstrlenW (lpString="150") returned 3 [0074.817] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="152") returned 3 [0074.817] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0074.817] lstrcpynW (in: lpString1=0x40b5f0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0074.817] lstrcpynW (in: lpString1=0x40bdf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.817] lstrcmpiW (lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", lpString2="") returned 1 [0074.817] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0074.817] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" [0074.817] lstrcpynW (in: lpString1=0x40a5f0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" [0074.818] CreateFileW (lpFileName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\nszc5ad.tmp\\system.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0074.819] lstrcpynW (in: lpString1=0x42c248, lpString2="Extract: ", iMaxLength=1024 | out: lpString1="Extract: ") returned="Extract: " [0074.819] lstrlenW (lpString="Extract: ") returned 9 [0074.819] lstrlenW (lpString="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned 59 [0074.819] lstrcatW (in: lpString1="Extract: ", lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" | out: lpString1="Extract: C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned="Extract: C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" [0074.819] SetFilePointer (in: hFile=0x180, lDistanceToMove=205051, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x320fb [0074.819] ReadFile (in: hFile=0x180, lpBuffer=0x2dff978, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2dff8b4, lpOverlapped=0x0 | out: lpBuffer=0x2dff978*, lpNumberOfBytesRead=0x2dff8b4*=0x4, lpOverlapped=0x0) returned 1 [0074.819] GetTickCount () returned 0x2070435 [0074.819] ReadFile (in: hFile=0x180, lpBuffer=0x41ea20, nNumberOfBytesToRead=0x1bb2, lpNumberOfBytesRead=0x2dff8b4, lpOverlapped=0x0 | out: lpBuffer=0x41ea20*, lpNumberOfBytesRead=0x2dff8b4*=0x1bb2, lpOverlapped=0x0) returned 1 [0074.819] GetTickCount () returned 0x2070435 [0074.819] MulDiv (nNumber=7090, nNumerator=100, nDenominator=7090) returned 100 [0074.819] wsprintfW (in: param_1=0x2dff8d0, param_2="... %d%%" | out: param_1="... 100%") returned 8 [0074.820] lstrlenW (lpString="Extract: C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned 68 [0074.820] lstrlenW (lpString="... 100%") returned 8 [0074.820] lstrcatW (in: lpString1="Extract: C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll", lpString2="... 100%" | out: lpString1="Extract: C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll... 100%") returned="Extract: C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll... 100%" [0074.820] WriteFile (in: hFile=0x1d0, lpBuffer=0x422a20*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0x2dff8c0, lpOverlapped=0x0 | out: lpBuffer=0x422a20*, lpNumberOfBytesWritten=0x2dff8c0*=0x3000, lpOverlapped=0x0) returned 1 [0074.821] CloseHandle (hObject=0x1d0) returned 1 [0074.896] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.r5 ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.r5 ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.r5 " [0074.896] lstrlenW (lpString="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.r5 ") returned 75 [0074.896] lstrcpynW (in: lpString1=0x33d454, lpString2="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.r5 ", iMaxLength=1024 | out: lpString1="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.r5 ") returned="KERNEL32::CreateFileA(m r4 , i 0x80000000, i 0, p 0, i 4, i 0x80, i 0)i.r5 " [0074.896] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0074.896] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" [0074.896] lstrcpynW (in: lpString1=0x40a5f0, lpString2="Call", iMaxLength=1024 | out: lpString1="Call") returned="Call" [0074.897] GetModuleHandleW (lpModuleName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned 0x0 [0074.899] LoadLibraryExW (lpLibFileName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll", hFile=0x0, dwFlags=0x8) returned 0x74ad0000 [0074.914] VirtualProtect (in: lpAddress=0x74ad505c, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x74ad504c | out: lpflOldProtect=0x74ad504c*=0x4) returned 1 [0074.915] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Call", cchWideChar=-1, lpMultiByteStr=0x2dff86c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Call", lpUsedDefaultChar=0x0) returned 5 [0074.915] GetProcAddress (hModule=0x74ad0000, lpProcName="Call") returned 0x74ad1817 [0074.917] lstrcpyW (in: lpString1=0x33e468, lpString2="KERNEL32" | out: lpString1="KERNEL32") returned="KERNEL32" [0074.919] lstrcpyW (in: lpString1=0x33ec78, lpString2="KERNEL32" | out: lpString1="KERNEL32") returned="KERNEL32" [0074.919] lstrcpyW (in: lpString1=0x33f478, lpString2="CreateFileA" | out: lpString1="CreateFileA") returned="CreateFileA" [0074.922] GetModuleHandleW (lpModuleName="KERNEL32") returned 0x75620000 [0074.922] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateFileA", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0074.922] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateFileA", cchWideChar=-1, lpMultiByteStr=0x339128, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateFileA", lpUsedDefaultChar=0x0) returned 12 [0074.922] GetProcAddress (hModule=0x75620000, lpProcName="CreateFileA") returned 0x7563537e [0074.922] lstrcpynW (in: lpString1=0x33d450, lpString2="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\Gestisk.For", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\Gestisk.For") returned="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\Gestisk.For" [0074.922] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\Gestisk.For", cchWideChar=1024, lpMultiByteStr=0x343950, cbMultiByte=1024, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\Gestisk.For", lpUsedDefaultChar=0x0) returned 1024 [0074.924] lstrcpynW (in: lpString1=0x33d450, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.924] CreateFileA (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\Gestisk.For" (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\gestisk.for"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0074.925] wsprintfW (in: param_1=0x33d450, param_2="%d" | out: param_1="0") returned 1 [0074.925] wsprintfW (in: param_1=0x33d450, param_2="%d" | out: param_1="128") returned 3 [0074.925] wsprintfW (in: param_1=0x33d450, param_2="%d" | out: param_1="4") returned 1 [0074.925] wsprintfW (in: param_1=0x33d450, param_2="%d" | out: param_1="0") returned 1 [0074.925] wsprintfW (in: param_1=0x33d450, param_2="%d" | out: param_1="0") returned 1 [0074.925] wsprintfW (in: param_1=0x33d450, param_2="%d" | out: param_1="-2147483648") returned 11 [0074.925] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x343950, cbMultiByte=1024, lpWideCharStr=0x33d450, cchWideChar=1023 | out: lpWideCharStr="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\Gestisk.For") returned 0 [0074.925] wsprintfW (in: param_1=0x33d450, param_2="%d" | out: param_1="464") returned 3 [0074.925] lstrcpyW (in: lpString1=0x438800, lpString2="464" | out: lpString1="464") returned="464" [0074.926] lstrcpynW (in: lpString1=0x40a5f0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.926] lstrlenW (lpString="") returned 0 [0074.926] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.926] lstrlenW (lpString="") returned 0 [0074.926] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.926] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.926] lstrcpynW (in: lpString1=0x432ea0, lpString2="152", iMaxLength=1024 | out: lpString1="152") returned="152" [0074.927] lstrlenW (lpString="152") returned 3 [0074.927] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0074.927] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0074.927] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0074.927] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0074.927] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0074.927] RegCloseKey (hKey=0x1c0) returned 0x0 [0074.928] lstrcpynW (in: lpString1=0x432ea4, lpString2="BECD27D2", iMaxLength=1024 | out: lpString1="BECD27D2") returned="BECD27D2" [0074.928] lstrlenW (lpString="BECD27D2") returned 8 [0074.928] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1262834254") returned 10 [0074.928] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0074.928] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0074.928] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0074.928] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0074.928] RegCloseKey (hKey=0x1c0) returned 0x0 [0074.930] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0074.930] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0074.930] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0074.931] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0074.931] lstrcpynW (in: lpString1=0x432ea0, lpString2="1262834254", iMaxLength=1024 | out: lpString1="1262834254") returned="1262834254" [0074.931] lstrlenW (lpString="1262834254") returned 10 [0074.931] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="4B45524E") returned 8 [0074.931] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.931] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.931] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.931] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.931] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.931] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.931] lstrlenW (lpString="0") returned 1 [0074.932] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.932] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.932] lstrlenW (lpString="0") returned 1 [0074.932] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.932] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.932] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.932] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.932] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.932] lstrlenW (lpString="0") returned 1 [0074.932] lstrcpynW (in: lpString1=0x432ea0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0074.932] lstrlenW (lpString="4B45524E") returned 8 [0074.932] lstrcpynW (in: lpString1=0x40a5f0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0074.932] lstrlenW (lpString="4B45524E") returned 8 [0074.932] lstrcpynW (in: lpString1=0x46b000, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0074.932] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.932] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.932] lstrlenW (lpString="") returned 0 [0074.932] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.932] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.932] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.932] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.932] lstrcpynW (in: lpString1=0x432ea4, lpString2="4B", iMaxLength=1024 | out: lpString1="4B") returned="4B" [0074.932] lstrlenW (lpString="4B") returned 2 [0074.933] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="K") returned 1 [0074.933] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.933] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.933] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0074.933] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.933] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.933] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.933] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.933] lstrcpynW (in: lpString1=0x432ea0, lpString2="K", iMaxLength=1024 | out: lpString1="K") returned="K" [0074.933] lstrlenW (lpString="K") returned 1 [0074.933] lstrcpynW (in: lpString1=0x40b5f0, lpString2="K", iMaxLength=1024 | out: lpString1="K") returned="K" [0074.933] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.933] lstrcmpiW (lpString1="K", lpString2="^") returned 1 [0074.933] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.933] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.934] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.934] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.934] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.934] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.934] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.934] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.934] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.934] lstrlenW (lpString="") returned 0 [0074.934] lstrcpynW (in: lpString1=0x432ea0, lpString2="K", iMaxLength=1024 | out: lpString1="K") returned="K" [0074.934] lstrlenW (lpString="K") returned 1 [0074.934] lstrcpynW (in: lpString1=0x40a5f0, lpString2="K", iMaxLength=1024 | out: lpString1="K") returned="K" [0074.934] lstrlenW (lpString="K") returned 1 [0074.934] lstrcpynW (in: lpString1=0x46c000, lpString2="K", iMaxLength=1024 | out: lpString1="K") returned="K" [0074.934] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.934] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.935] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.935] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.935] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.935] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.935] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.935] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.935] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.935] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0074.935] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.935] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.935] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0074.936] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.936] lstrlenW (lpString="C:\\Windows") returned 10 [0074.936] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.936] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.936] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.936] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.936] lstrlenW (lpString="524386") returned 6 [0074.936] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.936] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.936] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.936] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.937] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.937] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.937] lstrlenW (lpString="0") returned 1 [0074.937] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0074.937] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.937] lstrlenW (lpString="2") returned 1 [0074.937] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.937] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.937] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.937] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.937] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.937] lstrlenW (lpString="2") returned 1 [0074.937] lstrcpynW (in: lpString1=0x432ea0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0074.937] lstrlenW (lpString="4B45524E") returned 8 [0074.937] lstrcpynW (in: lpString1=0x40a5f0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0074.937] lstrlenW (lpString="4B45524E") returned 8 [0074.937] lstrcpynW (in: lpString1=0x46b000, lpString2="45524E", iMaxLength=1024 | out: lpString1="45524E") returned="45524E" [0074.937] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.937] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.937] lstrlenW (lpString="") returned 0 [0074.937] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.937] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.937] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.937] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.937] lstrcpynW (in: lpString1=0x432ea4, lpString2="45", iMaxLength=1024 | out: lpString1="45") returned="45" [0074.938] lstrlenW (lpString="45") returned 2 [0074.938] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="E") returned 1 [0074.938] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.938] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.938] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0074.938] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.938] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.938] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.938] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.938] lstrcpynW (in: lpString1=0x432ea0, lpString2="E", iMaxLength=1024 | out: lpString1="E") returned="E" [0074.938] lstrlenW (lpString="E") returned 1 [0074.938] lstrcpynW (in: lpString1=0x40b5f0, lpString2="E", iMaxLength=1024 | out: lpString1="E") returned="E" [0074.938] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.938] lstrcmpiW (lpString1="E", lpString2="^") returned 1 [0074.938] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.938] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.938] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.939] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.939] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.939] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.939] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.939] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.939] lstrcpynW (in: lpString1=0x432ea0, lpString2="K", iMaxLength=1024 | out: lpString1="K") returned="K" [0074.939] lstrlenW (lpString="K") returned 1 [0074.939] lstrcpynW (in: lpString1=0x432ea2, lpString2="E", iMaxLength=1024 | out: lpString1="E") returned="E" [0074.939] lstrlenW (lpString="E") returned 1 [0074.939] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KE", iMaxLength=1024 | out: lpString1="KE") returned="KE" [0074.939] lstrlenW (lpString="KE") returned 2 [0074.939] lstrcpynW (in: lpString1=0x46c000, lpString2="KE", iMaxLength=1024 | out: lpString1="KE") returned="KE" [0074.939] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.939] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.939] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.940] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.940] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.940] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.940] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.940] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.940] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.940] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0074.940] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.940] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.940] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0074.941] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.941] lstrlenW (lpString="C:\\Windows") returned 10 [0074.941] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.941] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.941] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.941] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.941] lstrlenW (lpString="524386") returned 6 [0074.941] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.941] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.941] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.941] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.941] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.941] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.941] lstrlenW (lpString="2") returned 1 [0074.941] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0074.941] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.941] lstrlenW (lpString="4") returned 1 [0074.942] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.942] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.942] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.942] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.942] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.942] lstrlenW (lpString="4") returned 1 [0074.942] lstrcpynW (in: lpString1=0x432ea0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0074.942] lstrlenW (lpString="4B45524E") returned 8 [0074.942] lstrcpynW (in: lpString1=0x40a5f0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0074.942] lstrlenW (lpString="4B45524E") returned 8 [0074.942] lstrcpynW (in: lpString1=0x46b000, lpString2="524E", iMaxLength=1024 | out: lpString1="524E") returned="524E" [0074.942] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.942] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.942] lstrlenW (lpString="") returned 0 [0074.942] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.942] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.942] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.942] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.942] lstrcpynW (in: lpString1=0x432ea4, lpString2="52", iMaxLength=1024 | out: lpString1="52") returned="52" [0074.942] lstrlenW (lpString="52") returned 2 [0074.942] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="R") returned 1 [0074.942] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.942] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.942] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0074.943] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.943] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.943] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.943] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.943] lstrcpynW (in: lpString1=0x432ea0, lpString2="R", iMaxLength=1024 | out: lpString1="R") returned="R" [0074.943] lstrlenW (lpString="R") returned 1 [0074.943] lstrcpynW (in: lpString1=0x40b5f0, lpString2="R", iMaxLength=1024 | out: lpString1="R") returned="R" [0074.943] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.943] lstrcmpiW (lpString1="R", lpString2="^") returned 1 [0074.943] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.943] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.943] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.943] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.943] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.943] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.944] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.944] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.944] lstrcpynW (in: lpString1=0x432ea0, lpString2="KE", iMaxLength=1024 | out: lpString1="KE") returned="KE" [0074.944] lstrlenW (lpString="KE") returned 2 [0074.944] lstrcpynW (in: lpString1=0x432ea4, lpString2="R", iMaxLength=1024 | out: lpString1="R") returned="R" [0074.944] lstrlenW (lpString="R") returned 1 [0074.944] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KER", iMaxLength=1024 | out: lpString1="KER") returned="KER" [0074.944] lstrlenW (lpString="KER") returned 3 [0074.944] lstrcpynW (in: lpString1=0x46c000, lpString2="KER", iMaxLength=1024 | out: lpString1="KER") returned="KER" [0074.944] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.944] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.944] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.944] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.944] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.944] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.944] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.945] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.945] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.945] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0074.945] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.945] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.945] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0074.945] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.945] lstrlenW (lpString="C:\\Windows") returned 10 [0074.945] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.945] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.946] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.946] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.946] lstrlenW (lpString="524386") returned 6 [0074.946] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.946] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.946] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.946] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.946] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.946] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.946] lstrlenW (lpString="4") returned 1 [0074.946] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0074.947] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.947] lstrlenW (lpString="6") returned 1 [0074.947] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.947] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.947] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.947] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.947] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.947] lstrlenW (lpString="6") returned 1 [0074.947] lstrcpynW (in: lpString1=0x432ea0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0074.947] lstrlenW (lpString="4B45524E") returned 8 [0074.947] lstrcpynW (in: lpString1=0x40a5f0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0074.947] lstrlenW (lpString="4B45524E") returned 8 [0074.947] lstrcpynW (in: lpString1=0x46b000, lpString2="4E", iMaxLength=1024 | out: lpString1="4E") returned="4E" [0074.947] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.947] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.947] lstrlenW (lpString="") returned 0 [0074.947] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.947] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.947] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.947] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.948] lstrcpynW (in: lpString1=0x432ea4, lpString2="4E", iMaxLength=1024 | out: lpString1="4E") returned="4E" [0074.948] lstrlenW (lpString="4E") returned 2 [0074.948] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="N") returned 1 [0074.948] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.948] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.948] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0074.948] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.948] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.948] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.948] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.948] lstrcpynW (in: lpString1=0x432ea0, lpString2="N", iMaxLength=1024 | out: lpString1="N") returned="N" [0074.948] lstrlenW (lpString="N") returned 1 [0074.948] lstrcpynW (in: lpString1=0x40b5f0, lpString2="N", iMaxLength=1024 | out: lpString1="N") returned="N" [0074.948] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.948] lstrcmpiW (lpString1="N", lpString2="^") returned 1 [0074.948] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.948] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.949] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.949] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.949] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.949] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.949] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.949] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.949] lstrcpynW (in: lpString1=0x432ea0, lpString2="KER", iMaxLength=1024 | out: lpString1="KER") returned="KER" [0074.949] lstrlenW (lpString="KER") returned 3 [0074.949] lstrcpynW (in: lpString1=0x432ea6, lpString2="N", iMaxLength=1024 | out: lpString1="N") returned="N" [0074.949] lstrlenW (lpString="N") returned 1 [0074.949] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERN", iMaxLength=1024 | out: lpString1="KERN") returned="KERN" [0074.949] lstrlenW (lpString="KERN") returned 4 [0074.949] lstrcpynW (in: lpString1=0x46c000, lpString2="KERN", iMaxLength=1024 | out: lpString1="KERN") returned="KERN" [0074.949] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.950] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.950] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.950] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.950] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.950] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.950] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.950] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.950] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.950] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0074.950] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.951] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.951] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0074.951] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.951] lstrlenW (lpString="C:\\Windows") returned 10 [0074.951] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.951] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.951] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.951] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.951] lstrlenW (lpString="524386") returned 6 [0074.951] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.951] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.951] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.951] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.951] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.951] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.951] lstrlenW (lpString="6") returned 1 [0074.951] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0074.952] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.952] lstrlenW (lpString="8") returned 1 [0074.952] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0074.952] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0074.952] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0074.952] lstrlenW (lpString="Execute: ") returned 9 [0074.952] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0074.952] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0074.952] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0074.953] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x21 [0074.953] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x21 [0074.953] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x21, lParam=0x0) returned 0x1 [0074.953] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0074.953] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0074.953] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0074.954] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0074.954] lstrcpynW (in: lpString1=0x432ea0, lpString2="152", iMaxLength=1024 | out: lpString1="152") returned="152" [0074.954] lstrlenW (lpString="152") returned 3 [0074.954] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="160") returned 3 [0074.954] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.954] lstrlenW (lpString="") returned 0 [0074.954] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.954] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.954] lstrcpynW (in: lpString1=0x432ea0, lpString2="160", iMaxLength=1024 | out: lpString1="160") returned="160" [0074.954] lstrlenW (lpString="160") returned 3 [0074.954] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0074.954] lstrcpynW (in: lpString1=0x40a5f0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0074.954] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned="B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0074.954] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0074.954] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0074.954] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0074.954] RegCloseKey (hKey=0x1c0) returned 0x0 [0074.954] lstrcpynW (in: lpString1=0x432ea4, lpString2="B0C446AE", iMaxLength=1024 | out: lpString1="B0C446AE") returned="B0C446AE" [0074.955] lstrlenW (lpString="B0C446AE") returned 8 [0074.955] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1162621746") returned 10 [0074.955] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0074.955] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0074.955] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0074.955] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0074.955] RegCloseKey (hKey=0x1c0) returned 0x0 [0074.955] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0074.955] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0074.955] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0074.955] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0074.955] lstrcpynW (in: lpString1=0x432ea0, lpString2="1162621746", iMaxLength=1024 | out: lpString1="1162621746") returned="1162621746" [0074.955] lstrlenW (lpString="1162621746") returned 10 [0074.955] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="454C3332") returned 8 [0074.955] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.956] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.956] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.956] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.956] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.956] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.956] lstrlenW (lpString="0") returned 1 [0074.956] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.956] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.956] lstrlenW (lpString="0") returned 1 [0074.956] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.956] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.956] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.956] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.956] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.956] lstrlenW (lpString="0") returned 1 [0074.956] lstrcpynW (in: lpString1=0x432ea0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0074.956] lstrlenW (lpString="454C3332") returned 8 [0074.956] lstrcpynW (in: lpString1=0x40a5f0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0074.956] lstrlenW (lpString="454C3332") returned 8 [0074.956] lstrcpynW (in: lpString1=0x46b000, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0074.956] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.957] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.957] lstrlenW (lpString="") returned 0 [0074.957] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.957] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.957] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.957] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.957] lstrcpynW (in: lpString1=0x432ea4, lpString2="45", iMaxLength=1024 | out: lpString1="45") returned="45" [0074.957] lstrlenW (lpString="45") returned 2 [0074.957] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="E") returned 1 [0074.957] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.957] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.957] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0074.957] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.957] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.957] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.957] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.957] lstrcpynW (in: lpString1=0x432ea0, lpString2="E", iMaxLength=1024 | out: lpString1="E") returned="E" [0074.957] lstrlenW (lpString="E") returned 1 [0074.957] lstrcpynW (in: lpString1=0x40b5f0, lpString2="E", iMaxLength=1024 | out: lpString1="E") returned="E" [0074.957] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.957] lstrcmpiW (lpString1="E", lpString2="^") returned 1 [0074.958] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.958] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.958] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.958] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.958] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.958] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.958] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.958] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.958] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERN", iMaxLength=1024 | out: lpString1="KERN") returned="KERN" [0074.958] lstrlenW (lpString="KERN") returned 4 [0074.958] lstrcpynW (in: lpString1=0x432ea8, lpString2="E", iMaxLength=1024 | out: lpString1="E") returned="E" [0074.958] lstrlenW (lpString="E") returned 1 [0074.958] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNE", iMaxLength=1024 | out: lpString1="KERNE") returned="KERNE" [0074.958] lstrlenW (lpString="KERNE") returned 5 [0074.959] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNE", iMaxLength=1024 | out: lpString1="KERNE") returned="KERNE" [0074.959] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.959] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.959] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.959] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.959] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.959] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.959] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.959] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.959] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.959] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0074.960] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.960] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.960] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0074.960] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.960] lstrlenW (lpString="C:\\Windows") returned 10 [0074.960] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.960] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.960] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.960] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.960] lstrlenW (lpString="524386") returned 6 [0074.960] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.960] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.960] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.961] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.961] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.961] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.961] lstrlenW (lpString="0") returned 1 [0074.961] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0074.961] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.961] lstrlenW (lpString="2") returned 1 [0074.961] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.961] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.961] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.961] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.961] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.961] lstrlenW (lpString="2") returned 1 [0074.961] lstrcpynW (in: lpString1=0x432ea0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0074.961] lstrlenW (lpString="454C3332") returned 8 [0074.961] lstrcpynW (in: lpString1=0x40a5f0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0074.961] lstrlenW (lpString="454C3332") returned 8 [0074.961] lstrcpynW (in: lpString1=0x46b000, lpString2="4C3332", iMaxLength=1024 | out: lpString1="4C3332") returned="4C3332" [0074.961] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.961] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.961] lstrlenW (lpString="") returned 0 [0074.961] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.961] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.961] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.961] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.961] lstrcpynW (in: lpString1=0x432ea4, lpString2="4C", iMaxLength=1024 | out: lpString1="4C") returned="4C" [0074.962] lstrlenW (lpString="4C") returned 2 [0074.962] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="L") returned 1 [0074.962] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.962] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.962] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0074.962] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.962] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.962] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.962] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.962] lstrcpynW (in: lpString1=0x432ea0, lpString2="L", iMaxLength=1024 | out: lpString1="L") returned="L" [0074.962] lstrlenW (lpString="L") returned 1 [0074.962] lstrcpynW (in: lpString1=0x40b5f0, lpString2="L", iMaxLength=1024 | out: lpString1="L") returned="L" [0074.962] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.962] lstrcmpiW (lpString1="L", lpString2="^") returned 1 [0074.962] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.962] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.962] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.962] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.963] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.963] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.963] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.963] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.963] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNE", iMaxLength=1024 | out: lpString1="KERNE") returned="KERNE" [0074.963] lstrlenW (lpString="KERNE") returned 5 [0074.963] lstrcpynW (in: lpString1=0x432eaa, lpString2="L", iMaxLength=1024 | out: lpString1="L") returned="L" [0074.963] lstrlenW (lpString="L") returned 1 [0074.963] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL", iMaxLength=1024 | out: lpString1="KERNEL") returned="KERNEL" [0074.963] lstrlenW (lpString="KERNEL") returned 6 [0074.963] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL", iMaxLength=1024 | out: lpString1="KERNEL") returned="KERNEL" [0074.963] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.963] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.963] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.963] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.964] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.964] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.964] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.964] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.964] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.964] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0074.964] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.964] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.964] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0074.964] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.964] lstrlenW (lpString="C:\\Windows") returned 10 [0074.964] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.964] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.965] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.965] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.965] lstrlenW (lpString="524386") returned 6 [0074.965] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.965] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.965] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.965] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.965] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.965] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.965] lstrlenW (lpString="2") returned 1 [0074.965] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0074.965] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.965] lstrlenW (lpString="4") returned 1 [0074.965] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.965] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.965] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.965] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.965] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.965] lstrlenW (lpString="4") returned 1 [0074.965] lstrcpynW (in: lpString1=0x432ea0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0074.965] lstrlenW (lpString="454C3332") returned 8 [0074.965] lstrcpynW (in: lpString1=0x40a5f0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0074.965] lstrlenW (lpString="454C3332") returned 8 [0074.965] lstrcpynW (in: lpString1=0x46b000, lpString2="3332", iMaxLength=1024 | out: lpString1="3332") returned="3332" [0074.965] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.966] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.966] lstrlenW (lpString="") returned 0 [0074.966] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.966] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.966] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.966] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.966] lstrcpynW (in: lpString1=0x432ea4, lpString2="33", iMaxLength=1024 | out: lpString1="33") returned="33" [0074.966] lstrlenW (lpString="33") returned 2 [0074.966] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="3") returned 1 [0074.966] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.966] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.966] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0074.966] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.966] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.966] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.966] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.966] lstrcpynW (in: lpString1=0x432ea0, lpString2="3", iMaxLength=1024 | out: lpString1="3") returned="3" [0074.966] lstrlenW (lpString="3") returned 1 [0074.966] lstrcpynW (in: lpString1=0x40b5f0, lpString2="3", iMaxLength=1024 | out: lpString1="3") returned="3" [0074.966] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.966] lstrcmpiW (lpString1="3", lpString2="^") returned 1 [0074.966] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.967] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.967] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.967] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.967] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.967] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.967] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.967] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.967] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL", iMaxLength=1024 | out: lpString1="KERNEL") returned="KERNEL" [0074.967] lstrlenW (lpString="KERNEL") returned 6 [0074.967] lstrcpynW (in: lpString1=0x432eac, lpString2="3", iMaxLength=1024 | out: lpString1="3") returned="3" [0074.967] lstrlenW (lpString="3") returned 1 [0074.967] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL3", iMaxLength=1024 | out: lpString1="KERNEL3") returned="KERNEL3" [0074.967] lstrlenW (lpString="KERNEL3") returned 7 [0074.967] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL3", iMaxLength=1024 | out: lpString1="KERNEL3") returned="KERNEL3" [0074.967] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.967] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.968] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.968] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.968] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.968] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.968] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.968] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.968] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.968] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0074.968] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.968] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.968] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0074.969] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.969] lstrlenW (lpString="C:\\Windows") returned 10 [0074.969] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.969] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.969] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.969] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.969] lstrlenW (lpString="524386") returned 6 [0074.969] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.969] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.969] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.969] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.969] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.969] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.969] lstrlenW (lpString="4") returned 1 [0074.969] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0074.969] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.969] lstrlenW (lpString="6") returned 1 [0074.970] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.970] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.970] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.970] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.970] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.970] lstrlenW (lpString="6") returned 1 [0074.970] lstrcpynW (in: lpString1=0x432ea0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0074.970] lstrlenW (lpString="454C3332") returned 8 [0074.970] lstrcpynW (in: lpString1=0x40a5f0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0074.970] lstrlenW (lpString="454C3332") returned 8 [0074.970] lstrcpynW (in: lpString1=0x46b000, lpString2="32", iMaxLength=1024 | out: lpString1="32") returned="32" [0074.970] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.970] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.970] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.970] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="2") returned 1 [0074.970] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.970] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0074.972] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.972] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.972] lstrcmpiW (lpString1="2", lpString2="^") returned 1 [0074.972] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.972] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.972] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.972] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.972] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.973] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.973] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.973] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.973] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL3", iMaxLength=1024 | out: lpString1="KERNEL3") returned="KERNEL3" [0074.973] lstrlenW (lpString="KERNEL3") returned 7 [0074.973] lstrcpynW (in: lpString1=0x432eae, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.973] lstrlenW (lpString="2") returned 1 [0074.973] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32", iMaxLength=1024 | out: lpString1="KERNEL32") returned="KERNEL32" [0074.973] lstrlenW (lpString="KERNEL32") returned 8 [0074.973] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32", iMaxLength=1024 | out: lpString1="KERNEL32") returned="KERNEL32" [0074.973] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.973] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.973] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.973] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.974] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.974] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.974] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.974] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.974] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.974] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0074.974] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.974] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.974] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0074.975] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.975] lstrlenW (lpString="C:\\Windows") returned 10 [0074.975] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.975] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.975] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.975] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.975] lstrlenW (lpString="524386") returned 6 [0074.975] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.975] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.975] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.975] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.975] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.975] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.975] lstrlenW (lpString="6") returned 1 [0074.975] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0074.975] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.975] lstrlenW (lpString="8") returned 1 [0074.975] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0074.976] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0074.976] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0074.976] lstrlenW (lpString="Execute: ") returned 9 [0074.976] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0074.976] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0074.976] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0074.976] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x22 [0074.976] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x22 [0074.977] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x22, lParam=0x0) returned 0x1 [0074.977] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0074.977] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0074.977] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0074.977] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0074.977] lstrcpynW (in: lpString1=0x432ea0, lpString2="160", iMaxLength=1024 | out: lpString1="160") returned="160" [0074.977] lstrlenW (lpString="160") returned 3 [0074.977] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="168") returned 3 [0074.977] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.978] lstrlenW (lpString="") returned 0 [0074.978] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.978] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.978] lstrcpynW (in: lpString1=0x432ea0, lpString2="168", iMaxLength=1024 | out: lpString1="168") returned="168" [0074.978] lstrlenW (lpString="168") returned 3 [0074.978] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0074.978] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0074.978] lstrcpynW (in: lpString1=0x46d000, lpString2="CFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0074.978] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0074.978] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0074.978] RegCloseKey (hKey=0x1c0) returned 0x0 [0074.978] lstrcpynW (in: lpString1=0x432ea4, lpString2="CFB223F5", iMaxLength=1024 | out: lpString1="CFB223F5") returned="CFB223F5" [0074.978] lstrlenW (lpString="CFB223F5") returned 8 [0074.979] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="976901737") returned 9 [0074.979] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0074.979] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0074.979] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0074.979] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0074.979] RegCloseKey (hKey=0x1c0) returned 0x0 [0074.979] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0074.979] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0074.979] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0074.979] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0074.979] lstrcpynW (in: lpString1=0x432ea0, lpString2="976901737", iMaxLength=1024 | out: lpString1="976901737") returned="976901737" [0074.979] lstrlenW (lpString="976901737") returned 9 [0074.979] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="3A3A5669") returned 8 [0074.979] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.979] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.980] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.980] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.980] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.980] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.980] lstrlenW (lpString="0") returned 1 [0074.980] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.980] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.980] lstrlenW (lpString="0") returned 1 [0074.980] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.980] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.980] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.980] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.980] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.980] lstrlenW (lpString="0") returned 1 [0074.980] lstrcpynW (in: lpString1=0x432ea0, lpString2="3A3A5669", iMaxLength=1024 | out: lpString1="3A3A5669") returned="3A3A5669" [0074.980] lstrlenW (lpString="3A3A5669") returned 8 [0074.980] lstrcpynW (in: lpString1=0x40a5f0, lpString2="3A3A5669", iMaxLength=1024 | out: lpString1="3A3A5669") returned="3A3A5669" [0074.980] lstrlenW (lpString="3A3A5669") returned 8 [0074.980] lstrcpynW (in: lpString1=0x46b000, lpString2="3A3A5669", iMaxLength=1024 | out: lpString1="3A3A5669") returned="3A3A5669" [0074.980] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.981] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.981] lstrlenW (lpString="") returned 0 [0074.981] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.981] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.981] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.981] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.981] lstrcpynW (in: lpString1=0x432ea4, lpString2="3A", iMaxLength=1024 | out: lpString1="3A") returned="3A" [0074.981] lstrlenW (lpString="3A") returned 2 [0074.981] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=":") returned 1 [0074.981] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.981] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.981] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0074.981] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.981] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.981] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.981] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.981] lstrcpynW (in: lpString1=0x432ea0, lpString2=":", iMaxLength=1024 | out: lpString1=":") returned=":" [0074.981] lstrlenW (lpString=":") returned 1 [0074.981] lstrcpynW (in: lpString1=0x40b5f0, lpString2=":", iMaxLength=1024 | out: lpString1=":") returned=":" [0074.981] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.981] lstrcmpiW (lpString1=":", lpString2="^") returned -1 [0074.981] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.982] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.982] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.982] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.982] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.982] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.982] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.982] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.982] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32", iMaxLength=1024 | out: lpString1="KERNEL32") returned="KERNEL32" [0074.982] lstrlenW (lpString="KERNEL32") returned 8 [0074.982] lstrcpynW (in: lpString1=0x432eb0, lpString2=":", iMaxLength=1024 | out: lpString1=":") returned=":" [0074.982] lstrlenW (lpString=":") returned 1 [0074.982] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32:", iMaxLength=1024 | out: lpString1="KERNEL32:") returned="KERNEL32:" [0074.982] lstrlenW (lpString="KERNEL32:") returned 9 [0074.982] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32:", iMaxLength=1024 | out: lpString1="KERNEL32:") returned="KERNEL32:" [0074.982] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.982] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.983] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.983] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.983] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.983] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.983] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.983] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.983] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.983] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0074.983] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.983] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.983] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0074.984] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.984] lstrlenW (lpString="C:\\Windows") returned 10 [0074.984] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.984] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.984] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.984] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.984] lstrlenW (lpString="524386") returned 6 [0074.984] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.984] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.984] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.984] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.984] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.984] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0074.984] lstrlenW (lpString="0") returned 1 [0074.984] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0074.984] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.984] lstrlenW (lpString="2") returned 1 [0074.984] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.984] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.984] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.984] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.985] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.985] lstrlenW (lpString="2") returned 1 [0074.985] lstrcpynW (in: lpString1=0x432ea0, lpString2="3A3A5669", iMaxLength=1024 | out: lpString1="3A3A5669") returned="3A3A5669" [0074.985] lstrlenW (lpString="3A3A5669") returned 8 [0074.985] lstrcpynW (in: lpString1=0x40a5f0, lpString2="3A3A5669", iMaxLength=1024 | out: lpString1="3A3A5669") returned="3A3A5669" [0074.985] lstrlenW (lpString="3A3A5669") returned 8 [0074.985] lstrcpynW (in: lpString1=0x46b000, lpString2="3A5669", iMaxLength=1024 | out: lpString1="3A5669") returned="3A5669" [0074.985] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.985] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.985] lstrlenW (lpString="") returned 0 [0074.985] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.985] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.985] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.985] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.985] lstrcpynW (in: lpString1=0x432ea4, lpString2="3A", iMaxLength=1024 | out: lpString1="3A") returned="3A" [0074.985] lstrlenW (lpString="3A") returned 2 [0074.985] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=":") returned 1 [0074.985] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.985] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.985] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0074.985] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.986] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.986] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.986] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.986] lstrcpynW (in: lpString1=0x432ea0, lpString2=":", iMaxLength=1024 | out: lpString1=":") returned=":" [0074.986] lstrlenW (lpString=":") returned 1 [0074.986] lstrcpynW (in: lpString1=0x40b5f0, lpString2=":", iMaxLength=1024 | out: lpString1=":") returned=":" [0074.986] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.986] lstrcmpiW (lpString1=":", lpString2="^") returned -1 [0074.986] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.986] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.986] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.986] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.986] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.986] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.987] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.987] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.987] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32:", iMaxLength=1024 | out: lpString1="KERNEL32:") returned="KERNEL32:" [0074.987] lstrlenW (lpString="KERNEL32:") returned 9 [0074.987] lstrcpynW (in: lpString1=0x432eb2, lpString2=":", iMaxLength=1024 | out: lpString1=":") returned=":" [0074.987] lstrlenW (lpString=":") returned 1 [0074.987] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::", iMaxLength=1024 | out: lpString1="KERNEL32::") returned="KERNEL32::" [0074.987] lstrlenW (lpString="KERNEL32::") returned 10 [0074.987] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::", iMaxLength=1024 | out: lpString1="KERNEL32::") returned="KERNEL32::" [0074.987] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.987] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.987] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.987] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.987] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.988] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.988] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.988] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.988] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.988] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0074.988] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.988] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.988] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0074.989] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.989] lstrlenW (lpString="C:\\Windows") returned 10 [0074.989] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.989] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.989] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.989] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.989] lstrlenW (lpString="524386") returned 6 [0074.989] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.989] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.989] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.989] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.989] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.989] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0074.989] lstrlenW (lpString="2") returned 1 [0074.989] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0074.989] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.989] lstrlenW (lpString="4") returned 1 [0074.989] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.989] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.989] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.990] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.990] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.990] lstrlenW (lpString="4") returned 1 [0074.990] lstrcpynW (in: lpString1=0x432ea0, lpString2="3A3A5669", iMaxLength=1024 | out: lpString1="3A3A5669") returned="3A3A5669" [0074.990] lstrlenW (lpString="3A3A5669") returned 8 [0074.990] lstrcpynW (in: lpString1=0x40a5f0, lpString2="3A3A5669", iMaxLength=1024 | out: lpString1="3A3A5669") returned="3A3A5669" [0074.990] lstrlenW (lpString="3A3A5669") returned 8 [0074.990] lstrcpynW (in: lpString1=0x46b000, lpString2="5669", iMaxLength=1024 | out: lpString1="5669") returned="5669" [0074.990] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.990] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.990] lstrlenW (lpString="") returned 0 [0074.990] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.990] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.990] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.990] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.990] lstrcpynW (in: lpString1=0x432ea4, lpString2="56", iMaxLength=1024 | out: lpString1="56") returned="56" [0074.990] lstrlenW (lpString="56") returned 2 [0074.990] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="V") returned 1 [0074.990] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.990] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.990] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0074.991] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.991] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.991] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.991] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.991] lstrcpynW (in: lpString1=0x432ea0, lpString2="V", iMaxLength=1024 | out: lpString1="V") returned="V" [0074.991] lstrlenW (lpString="V") returned 1 [0074.991] lstrcpynW (in: lpString1=0x40b5f0, lpString2="V", iMaxLength=1024 | out: lpString1="V") returned="V" [0074.991] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.991] lstrcmpiW (lpString1="V", lpString2="^") returned 1 [0074.991] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.991] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.991] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.991] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.991] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.991] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.992] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.992] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.992] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::", iMaxLength=1024 | out: lpString1="KERNEL32::") returned="KERNEL32::" [0074.992] lstrlenW (lpString="KERNEL32::") returned 10 [0074.992] lstrcpynW (in: lpString1=0x432eb4, lpString2="V", iMaxLength=1024 | out: lpString1="V") returned="V" [0074.992] lstrlenW (lpString="V") returned 1 [0074.992] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::V", iMaxLength=1024 | out: lpString1="KERNEL32::V") returned="KERNEL32::V" [0074.992] lstrlenW (lpString="KERNEL32::V") returned 11 [0074.992] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::V", iMaxLength=1024 | out: lpString1="KERNEL32::V") returned="KERNEL32::V" [0074.992] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.992] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.992] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.992] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.992] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.992] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.993] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.993] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.993] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.993] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0074.993] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.994] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.994] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0074.994] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.994] lstrlenW (lpString="C:\\Windows") returned 10 [0074.994] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.994] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.994] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.994] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.994] lstrlenW (lpString="524386") returned 6 [0074.994] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.994] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.994] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.994] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.994] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.995] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0074.995] lstrlenW (lpString="4") returned 1 [0074.995] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0074.995] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.995] lstrlenW (lpString="6") returned 1 [0074.995] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.995] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.995] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0074.995] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0074.995] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.995] lstrlenW (lpString="6") returned 1 [0074.995] lstrcpynW (in: lpString1=0x432ea0, lpString2="3A3A5669", iMaxLength=1024 | out: lpString1="3A3A5669") returned="3A3A5669" [0074.995] lstrlenW (lpString="3A3A5669") returned 8 [0074.995] lstrcpynW (in: lpString1=0x40a5f0, lpString2="3A3A5669", iMaxLength=1024 | out: lpString1="3A3A5669") returned="3A3A5669" [0074.995] lstrlenW (lpString="3A3A5669") returned 8 [0074.995] lstrcpynW (in: lpString1=0x46b000, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0074.995] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0074.995] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.995] lstrlenW (lpString="") returned 0 [0074.995] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0074.995] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0074.995] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0074.995] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0074.995] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0074.995] lstrlenW (lpString="69") returned 2 [0074.995] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0074.995] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0074.996] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0074.996] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0074.996] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.996] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0074.996] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0074.996] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0074.996] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0074.996] lstrlenW (lpString="i") returned 1 [0074.996] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0074.996] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0074.996] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0074.996] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0074.996] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0074.996] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0074.996] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0074.997] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0074.997] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0074.997] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0074.997] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0074.997] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::V", iMaxLength=1024 | out: lpString1="KERNEL32::V") returned="KERNEL32::V" [0074.997] lstrlenW (lpString="KERNEL32::V") returned 11 [0074.997] lstrcpynW (in: lpString1=0x432eb6, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0074.997] lstrlenW (lpString="i") returned 1 [0074.997] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::Vi", iMaxLength=1024 | out: lpString1="KERNEL32::Vi") returned="KERNEL32::Vi" [0074.997] lstrlenW (lpString="KERNEL32::Vi") returned 12 [0074.997] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::Vi", iMaxLength=1024 | out: lpString1="KERNEL32::Vi") returned="KERNEL32::Vi" [0074.997] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0074.997] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.997] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0074.997] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.998] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0074.998] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.998] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0074.998] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0074.998] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0074.998] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0074.998] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.998] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0074.998] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0074.998] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0074.998] lstrlenW (lpString="C:\\Windows") returned 10 [0074.998] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0074.998] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0074.999] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0074.999] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0074.999] lstrlenW (lpString="524386") returned 6 [0074.999] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0074.999] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0074.999] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0074.999] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0074.999] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0074.999] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0074.999] lstrlenW (lpString="6") returned 1 [0074.999] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0074.999] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0074.999] lstrlenW (lpString="8") returned 1 [0074.999] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0074.999] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0074.999] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0074.999] lstrlenW (lpString="Execute: ") returned 9 [0074.999] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0074.999] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0074.999] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.000] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x23 [0075.000] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x23 [0075.000] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x23, lParam=0x0) returned 0x1 [0075.000] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.001] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.001] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.001] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.001] lstrcpynW (in: lpString1=0x432ea0, lpString2="168", iMaxLength=1024 | out: lpString1="168") returned="168" [0075.001] lstrlenW (lpString="168") returned 3 [0075.001] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="176") returned 3 [0075.001] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.001] lstrlenW (lpString="") returned 0 [0075.001] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.001] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.001] lstrcpynW (in: lpString1=0x432ea0, lpString2="176", iMaxLength=1024 | out: lpString1="176") returned="176" [0075.001] lstrlenW (lpString="176") returned 3 [0075.001] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.001] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0075.001] lstrlenW (lpString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returned 1023 [0075.001] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.001] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.001] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.001] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.002] lstrcpynW (in: lpString1=0x432ea4, lpString2="87FC00FD", iMaxLength=1024 | out: lpString1="87FC00FD") returned="87FC00FD" [0075.002] lstrlenW (lpString="87FC00FD") returned 8 [0075.002] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1920234849") returned 10 [0075.002] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.002] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.002] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.002] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.002] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.002] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.002] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.002] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.002] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.002] lstrcpynW (in: lpString1=0x432ea0, lpString2="1920234849", iMaxLength=1024 | out: lpString1="1920234849") returned="1920234849" [0075.002] lstrlenW (lpString="1920234849") returned 10 [0075.002] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="72747561") returned 8 [0075.002] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.002] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.003] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.003] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.003] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.003] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.003] lstrlenW (lpString="0") returned 1 [0075.003] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.003] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.003] lstrlenW (lpString="0") returned 1 [0075.003] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.003] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.003] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.003] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.003] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.003] lstrlenW (lpString="0") returned 1 [0075.003] lstrcpynW (in: lpString1=0x432ea0, lpString2="72747561", iMaxLength=1024 | out: lpString1="72747561") returned="72747561" [0075.003] lstrlenW (lpString="72747561") returned 8 [0075.003] lstrcpynW (in: lpString1=0x40a5f0, lpString2="72747561", iMaxLength=1024 | out: lpString1="72747561") returned="72747561" [0075.003] lstrlenW (lpString="72747561") returned 8 [0075.003] lstrcpynW (in: lpString1=0x46b000, lpString2="72747561", iMaxLength=1024 | out: lpString1="72747561") returned="72747561" [0075.003] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.003] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.003] lstrlenW (lpString="") returned 0 [0075.003] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.003] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.003] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.004] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.004] lstrcpynW (in: lpString1=0x432ea4, lpString2="72", iMaxLength=1024 | out: lpString1="72") returned="72" [0075.004] lstrlenW (lpString="72") returned 2 [0075.004] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="r") returned 1 [0075.004] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.004] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.004] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.004] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.004] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.004] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.004] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.004] lstrcpynW (in: lpString1=0x432ea0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0075.004] lstrlenW (lpString="r") returned 1 [0075.004] lstrcpynW (in: lpString1=0x40b5f0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0075.004] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.004] lstrcmpiW (lpString1="r", lpString2="^") returned 1 [0075.004] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.004] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.005] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.005] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.005] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.005] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.005] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.005] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.005] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::Vi", iMaxLength=1024 | out: lpString1="KERNEL32::Vi") returned="KERNEL32::Vi" [0075.005] lstrlenW (lpString="KERNEL32::Vi") returned 12 [0075.005] lstrcpynW (in: lpString1=0x432eb8, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0075.005] lstrlenW (lpString="r") returned 1 [0075.005] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::Vir", iMaxLength=1024 | out: lpString1="KERNEL32::Vir") returned="KERNEL32::Vir" [0075.005] lstrlenW (lpString="KERNEL32::Vir") returned 13 [0075.005] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::Vir", iMaxLength=1024 | out: lpString1="KERNEL32::Vir") returned="KERNEL32::Vir" [0075.005] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.005] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.005] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.006] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.006] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.006] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.006] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.006] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.006] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.006] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.006] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.006] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.006] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.007] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.007] lstrlenW (lpString="C:\\Windows") returned 10 [0075.007] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.007] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.007] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.007] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.007] lstrlenW (lpString="524386") returned 6 [0075.007] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.007] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.007] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.007] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.007] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.007] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.007] lstrlenW (lpString="0") returned 1 [0075.007] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.007] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.007] lstrlenW (lpString="2") returned 1 [0075.007] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.007] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.008] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.008] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.008] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.008] lstrlenW (lpString="2") returned 1 [0075.008] lstrcpynW (in: lpString1=0x432ea0, lpString2="72747561", iMaxLength=1024 | out: lpString1="72747561") returned="72747561" [0075.008] lstrlenW (lpString="72747561") returned 8 [0075.008] lstrcpynW (in: lpString1=0x40a5f0, lpString2="72747561", iMaxLength=1024 | out: lpString1="72747561") returned="72747561" [0075.008] lstrlenW (lpString="72747561") returned 8 [0075.008] lstrcpynW (in: lpString1=0x46b000, lpString2="747561", iMaxLength=1024 | out: lpString1="747561") returned="747561" [0075.008] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.008] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.008] lstrlenW (lpString="") returned 0 [0075.008] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.008] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.008] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.008] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.008] lstrcpynW (in: lpString1=0x432ea4, lpString2="74", iMaxLength=1024 | out: lpString1="74") returned="74" [0075.008] lstrlenW (lpString="74") returned 2 [0075.008] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="t") returned 1 [0075.008] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.008] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.008] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.008] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.009] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.009] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.009] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.009] lstrcpynW (in: lpString1=0x432ea0, lpString2="t", iMaxLength=1024 | out: lpString1="t") returned="t" [0075.009] lstrlenW (lpString="t") returned 1 [0075.009] lstrcpynW (in: lpString1=0x40b5f0, lpString2="t", iMaxLength=1024 | out: lpString1="t") returned="t" [0075.009] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.009] lstrcmpiW (lpString1="t", lpString2="^") returned 1 [0075.009] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.009] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.009] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.010] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.010] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.010] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.010] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.010] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.010] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::Vir", iMaxLength=1024 | out: lpString1="KERNEL32::Vir") returned="KERNEL32::Vir" [0075.010] lstrlenW (lpString="KERNEL32::Vir") returned 13 [0075.010] lstrcpynW (in: lpString1=0x432eba, lpString2="t", iMaxLength=1024 | out: lpString1="t") returned="t" [0075.010] lstrlenW (lpString="t") returned 1 [0075.010] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::Virt", iMaxLength=1024 | out: lpString1="KERNEL32::Virt") returned="KERNEL32::Virt" [0075.010] lstrlenW (lpString="KERNEL32::Virt") returned 14 [0075.010] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::Virt", iMaxLength=1024 | out: lpString1="KERNEL32::Virt") returned="KERNEL32::Virt" [0075.010] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.010] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.010] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.010] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.011] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.011] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.011] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.011] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.011] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.011] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.011] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.011] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.011] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.011] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.011] lstrlenW (lpString="C:\\Windows") returned 10 [0075.012] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.012] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.012] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.012] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.012] lstrlenW (lpString="524386") returned 6 [0075.012] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.012] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.012] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.012] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.012] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.012] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.012] lstrlenW (lpString="2") returned 1 [0075.012] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.012] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.012] lstrlenW (lpString="4") returned 1 [0075.012] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.012] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.012] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.012] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.012] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.012] lstrlenW (lpString="4") returned 1 [0075.013] lstrcpynW (in: lpString1=0x432ea0, lpString2="72747561", iMaxLength=1024 | out: lpString1="72747561") returned="72747561" [0075.013] lstrlenW (lpString="72747561") returned 8 [0075.013] lstrcpynW (in: lpString1=0x40a5f0, lpString2="72747561", iMaxLength=1024 | out: lpString1="72747561") returned="72747561" [0075.013] lstrlenW (lpString="72747561") returned 8 [0075.013] lstrcpynW (in: lpString1=0x46b000, lpString2="7561", iMaxLength=1024 | out: lpString1="7561") returned="7561" [0075.013] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.013] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.013] lstrlenW (lpString="") returned 0 [0075.013] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.013] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.013] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.013] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.013] lstrcpynW (in: lpString1=0x432ea4, lpString2="75", iMaxLength=1024 | out: lpString1="75") returned="75" [0075.013] lstrlenW (lpString="75") returned 2 [0075.013] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="u") returned 1 [0075.013] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.013] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.013] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.013] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.013] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.013] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.014] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.014] lstrcpynW (in: lpString1=0x432ea0, lpString2="u", iMaxLength=1024 | out: lpString1="u") returned="u" [0075.014] lstrlenW (lpString="u") returned 1 [0075.014] lstrcpynW (in: lpString1=0x40b5f0, lpString2="u", iMaxLength=1024 | out: lpString1="u") returned="u" [0075.014] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.014] lstrcmpiW (lpString1="u", lpString2="^") returned 1 [0075.014] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.014] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.014] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.014] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.014] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.014] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.015] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.015] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.015] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.015] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.015] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.015] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.015] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.015] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.015] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.015] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.016] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.016] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.016] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.016] lstrlenW (lpString="C:\\Windows") returned 10 [0075.016] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.016] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.016] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.016] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.016] lstrlenW (lpString="524386") returned 6 [0075.016] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.016] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.016] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.016] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.016] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.016] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.016] lstrlenW (lpString="4") returned 1 [0075.016] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.016] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.016] lstrlenW (lpString="6") returned 1 [0075.017] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.017] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.017] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.017] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.017] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.017] lstrlenW (lpString="6") returned 1 [0075.017] lstrcpynW (in: lpString1=0x432ea0, lpString2="72747561", iMaxLength=1024 | out: lpString1="72747561") returned="72747561" [0075.017] lstrlenW (lpString="72747561") returned 8 [0075.017] lstrcpynW (in: lpString1=0x40a5f0, lpString2="72747561", iMaxLength=1024 | out: lpString1="72747561") returned="72747561" [0075.017] lstrlenW (lpString="72747561") returned 8 [0075.017] lstrcpynW (in: lpString1=0x46b000, lpString2="61", iMaxLength=1024 | out: lpString1="61") returned="61" [0075.017] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.017] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.017] lstrlenW (lpString="") returned 0 [0075.017] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.017] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.017] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.017] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.017] lstrcpynW (in: lpString1=0x432ea4, lpString2="61", iMaxLength=1024 | out: lpString1="61") returned="61" [0075.017] lstrlenW (lpString="61") returned 2 [0075.017] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="a") returned 1 [0075.017] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.017] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.017] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.017] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.018] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.018] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.018] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.018] lstrcpynW (in: lpString1=0x432ea0, lpString2="a", iMaxLength=1024 | out: lpString1="a") returned="a" [0075.018] lstrlenW (lpString="a") returned 1 [0075.018] lstrcpynW (in: lpString1=0x40b5f0, lpString2="a", iMaxLength=1024 | out: lpString1="a") returned="a" [0075.018] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.018] lstrcmpiW (lpString1="a", lpString2="^") returned 1 [0075.018] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.018] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.018] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.018] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.018] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.018] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.019] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.019] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.019] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::Virtu", iMaxLength=1024 | out: lpString1="KERNEL32::Virtu") returned="KERNEL32::Virtu" [0075.019] lstrlenW (lpString="KERNEL32::Virtu") returned 15 [0075.019] lstrcpynW (in: lpString1=0x432ebe, lpString2="a", iMaxLength=1024 | out: lpString1="a") returned="a" [0075.019] lstrlenW (lpString="a") returned 1 [0075.019] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::Virtua", iMaxLength=1024 | out: lpString1="KERNEL32::Virtua") returned="KERNEL32::Virtua" [0075.019] lstrlenW (lpString="KERNEL32::Virtua") returned 16 [0075.019] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::Virtua", iMaxLength=1024 | out: lpString1="KERNEL32::Virtua") returned="KERNEL32::Virtua" [0075.019] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.019] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.019] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.020] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.020] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.020] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.020] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.020] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.020] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.020] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.020] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.020] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.020] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.020] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.020] lstrlenW (lpString="C:\\Windows") returned 10 [0075.021] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.021] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.021] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.021] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.021] lstrlenW (lpString="524386") returned 6 [0075.021] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.021] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.021] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.021] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.021] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.021] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.021] lstrlenW (lpString="6") returned 1 [0075.021] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.021] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.021] lstrlenW (lpString="8") returned 1 [0075.021] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.021] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.021] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.021] lstrlenW (lpString="Execute: ") returned 9 [0075.021] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.021] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.021] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.022] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x24 [0075.022] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x24 [0075.022] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x24, lParam=0x0) returned 0x1 [0075.022] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.022] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.023] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.023] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.023] lstrcpynW (in: lpString1=0x432ea0, lpString2="176", iMaxLength=1024 | out: lpString1="176") returned="176" [0075.023] lstrlenW (lpString="176") returned 3 [0075.023] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="184") returned 3 [0075.023] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.023] lstrlenW (lpString="") returned 0 [0075.023] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.023] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.023] lstrcpynW (in: lpString1=0x432ea0, lpString2="184", iMaxLength=1024 | out: lpString1="184") returned="184" [0075.023] lstrlenW (lpString="184") returned 3 [0075.023] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0075.023] lstrlenW (lpString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returned 1023 [0075.023] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrlenW (lpString="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned 1023 [0075.023] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.023] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.023] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.023] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.023] lstrcpynW (in: lpString1=0x432ea4, lpString2="99C919F0", iMaxLength=1024 | out: lpString1="99C919F0") returned="99C919F0" [0075.023] lstrlenW (lpString="99C919F0") returned 8 [0075.023] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1816226924") returned 10 [0075.024] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.024] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.024] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.024] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.024] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.024] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.024] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.024] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.033] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.033] lstrcpynW (in: lpString1=0x432ea0, lpString2="1816226924", iMaxLength=1024 | out: lpString1="1816226924") returned="1816226924" [0075.033] lstrlenW (lpString="1816226924") returned 10 [0075.033] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="6C416C6C") returned 8 [0075.033] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.033] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.033] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.033] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.033] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.033] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.033] lstrlenW (lpString="0") returned 1 [0075.034] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.034] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.034] lstrlenW (lpString="0") returned 1 [0075.034] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.034] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.034] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.034] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.034] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.034] lstrlenW (lpString="0") returned 1 [0075.034] lstrcpynW (in: lpString1=0x432ea0, lpString2="6C416C6C", iMaxLength=1024 | out: lpString1="6C416C6C") returned="6C416C6C" [0075.034] lstrlenW (lpString="6C416C6C") returned 8 [0075.034] lstrcpynW (in: lpString1=0x40a5f0, lpString2="6C416C6C", iMaxLength=1024 | out: lpString1="6C416C6C") returned="6C416C6C" [0075.034] lstrlenW (lpString="6C416C6C") returned 8 [0075.034] lstrcpynW (in: lpString1=0x46b000, lpString2="6C416C6C", iMaxLength=1024 | out: lpString1="6C416C6C") returned="6C416C6C" [0075.034] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.034] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.034] lstrlenW (lpString="") returned 0 [0075.034] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.034] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.034] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.034] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.034] lstrcpynW (in: lpString1=0x432ea4, lpString2="6C", iMaxLength=1024 | out: lpString1="6C") returned="6C" [0075.034] lstrlenW (lpString="6C") returned 2 [0075.034] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="l") returned 1 [0075.034] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.034] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.034] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.035] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.035] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.035] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.035] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.035] lstrcpynW (in: lpString1=0x432ea0, lpString2="l", iMaxLength=1024 | out: lpString1="l") returned="l" [0075.035] lstrlenW (lpString="l") returned 1 [0075.035] lstrcpynW (in: lpString1=0x40b5f0, lpString2="l", iMaxLength=1024 | out: lpString1="l") returned="l" [0075.035] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.035] lstrcmpiW (lpString1="l", lpString2="^") returned 1 [0075.035] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.035] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.035] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.035] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.035] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.035] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.036] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.036] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.036] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::Virtua", iMaxLength=1024 | out: lpString1="KERNEL32::Virtua") returned="KERNEL32::Virtua" [0075.036] lstrlenW (lpString="KERNEL32::Virtua") returned 16 [0075.036] lstrcpynW (in: lpString1=0x432ec0, lpString2="l", iMaxLength=1024 | out: lpString1="l") returned="l" [0075.036] lstrlenW (lpString="l") returned 1 [0075.036] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::Virtual", iMaxLength=1024 | out: lpString1="KERNEL32::Virtual") returned="KERNEL32::Virtual" [0075.036] lstrlenW (lpString="KERNEL32::Virtual") returned 17 [0075.036] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::Virtual", iMaxLength=1024 | out: lpString1="KERNEL32::Virtual") returned="KERNEL32::Virtual" [0075.036] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.036] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.036] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.036] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.036] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.036] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.036] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.036] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.036] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.037] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.037] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.037] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.037] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.037] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.037] lstrlenW (lpString="C:\\Windows") returned 10 [0075.037] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.037] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.037] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.037] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.037] lstrlenW (lpString="524386") returned 6 [0075.037] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.037] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.037] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.037] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.038] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.038] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.038] lstrlenW (lpString="0") returned 1 [0075.038] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.038] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.038] lstrlenW (lpString="2") returned 1 [0075.038] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.038] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.038] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.038] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.038] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.038] lstrlenW (lpString="2") returned 1 [0075.038] lstrcpynW (in: lpString1=0x432ea0, lpString2="6C416C6C", iMaxLength=1024 | out: lpString1="6C416C6C") returned="6C416C6C" [0075.038] lstrlenW (lpString="6C416C6C") returned 8 [0075.038] lstrcpynW (in: lpString1=0x40a5f0, lpString2="6C416C6C", iMaxLength=1024 | out: lpString1="6C416C6C") returned="6C416C6C" [0075.038] lstrlenW (lpString="6C416C6C") returned 8 [0075.038] lstrcpynW (in: lpString1=0x46b000, lpString2="416C6C", iMaxLength=1024 | out: lpString1="416C6C") returned="416C6C" [0075.038] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.038] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.038] lstrlenW (lpString="") returned 0 [0075.038] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.038] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.038] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.038] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.038] lstrcpynW (in: lpString1=0x432ea4, lpString2="41", iMaxLength=1024 | out: lpString1="41") returned="41" [0075.038] lstrlenW (lpString="41") returned 2 [0075.039] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="A") returned 1 [0075.039] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.039] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.039] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.039] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.039] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.039] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.039] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.039] lstrcpynW (in: lpString1=0x432ea0, lpString2="A", iMaxLength=1024 | out: lpString1="A") returned="A" [0075.039] lstrlenW (lpString="A") returned 1 [0075.039] lstrcpynW (in: lpString1=0x40b5f0, lpString2="A", iMaxLength=1024 | out: lpString1="A") returned="A" [0075.039] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.039] lstrcmpiW (lpString1="A", lpString2="^") returned 1 [0075.039] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.039] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.039] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.039] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.039] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.039] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.040] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.040] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.040] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::Virtual", iMaxLength=1024 | out: lpString1="KERNEL32::Virtual") returned="KERNEL32::Virtual" [0075.040] lstrlenW (lpString="KERNEL32::Virtual") returned 17 [0075.040] lstrcpynW (in: lpString1=0x432ec2, lpString2="A", iMaxLength=1024 | out: lpString1="A") returned="A" [0075.040] lstrlenW (lpString="A") returned 1 [0075.040] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualA", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualA") returned="KERNEL32::VirtualA" [0075.040] lstrlenW (lpString="KERNEL32::VirtualA") returned 18 [0075.040] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualA", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualA") returned="KERNEL32::VirtualA" [0075.040] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.040] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.040] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.041] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.041] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.041] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.041] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.041] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.041] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.041] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.041] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.041] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.041] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.041] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.041] lstrlenW (lpString="C:\\Windows") returned 10 [0075.042] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.042] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.042] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.042] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.042] lstrlenW (lpString="524386") returned 6 [0075.042] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.042] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.042] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.042] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.042] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.042] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.042] lstrlenW (lpString="2") returned 1 [0075.042] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.042] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.042] lstrlenW (lpString="4") returned 1 [0075.042] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.042] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.042] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.042] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.042] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.042] lstrlenW (lpString="4") returned 1 [0075.042] lstrcpynW (in: lpString1=0x432ea0, lpString2="6C416C6C", iMaxLength=1024 | out: lpString1="6C416C6C") returned="6C416C6C" [0075.042] lstrlenW (lpString="6C416C6C") returned 8 [0075.042] lstrcpynW (in: lpString1=0x40a5f0, lpString2="6C416C6C", iMaxLength=1024 | out: lpString1="6C416C6C") returned="6C416C6C" [0075.042] lstrlenW (lpString="6C416C6C") returned 8 [0075.043] lstrcpynW (in: lpString1=0x46b000, lpString2="6C6C", iMaxLength=1024 | out: lpString1="6C6C") returned="6C6C" [0075.043] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.043] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.043] lstrlenW (lpString="") returned 0 [0075.043] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.043] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.043] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.043] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.043] lstrcpynW (in: lpString1=0x432ea4, lpString2="6C", iMaxLength=1024 | out: lpString1="6C") returned="6C" [0075.043] lstrlenW (lpString="6C") returned 2 [0075.043] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="l") returned 1 [0075.043] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.043] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.043] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.043] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.043] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.043] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.043] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.043] lstrcpynW (in: lpString1=0x432ea0, lpString2="l", iMaxLength=1024 | out: lpString1="l") returned="l" [0075.043] lstrlenW (lpString="l") returned 1 [0075.043] lstrcpynW (in: lpString1=0x40b5f0, lpString2="l", iMaxLength=1024 | out: lpString1="l") returned="l" [0075.043] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.044] lstrcmpiW (lpString1="l", lpString2="^") returned 1 [0075.044] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.044] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.044] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.044] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.044] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.044] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.044] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.044] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.044] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualA", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualA") returned="KERNEL32::VirtualA" [0075.044] lstrlenW (lpString="KERNEL32::VirtualA") returned 18 [0075.044] lstrcpynW (in: lpString1=0x432ec4, lpString2="l", iMaxLength=1024 | out: lpString1="l") returned="l" [0075.044] lstrlenW (lpString="l") returned 1 [0075.044] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAl", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAl") returned="KERNEL32::VirtualAl" [0075.044] lstrlenW (lpString="KERNEL32::VirtualAl") returned 19 [0075.044] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAl", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAl") returned="KERNEL32::VirtualAl" [0075.044] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.045] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.045] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.045] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.045] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.045] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.045] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.045] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.045] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.045] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.045] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.045] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.045] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.045] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.046] lstrlenW (lpString="C:\\Windows") returned 10 [0075.046] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.046] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.046] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.046] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.046] lstrlenW (lpString="524386") returned 6 [0075.046] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.046] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.046] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.046] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.046] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.046] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.046] lstrlenW (lpString="4") returned 1 [0075.046] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.046] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.046] lstrlenW (lpString="6") returned 1 [0075.046] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.046] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.046] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.046] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.046] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.046] lstrlenW (lpString="6") returned 1 [0075.046] lstrcpynW (in: lpString1=0x432ea0, lpString2="6C416C6C", iMaxLength=1024 | out: lpString1="6C416C6C") returned="6C416C6C" [0075.046] lstrlenW (lpString="6C416C6C") returned 8 [0075.047] lstrcpynW (in: lpString1=0x40a5f0, lpString2="6C416C6C", iMaxLength=1024 | out: lpString1="6C416C6C") returned="6C416C6C" [0075.047] lstrlenW (lpString="6C416C6C") returned 8 [0075.047] lstrcpynW (in: lpString1=0x46b000, lpString2="6C", iMaxLength=1024 | out: lpString1="6C") returned="6C" [0075.047] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.047] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.047] lstrlenW (lpString="") returned 0 [0075.047] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.047] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.047] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.047] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.047] lstrcpynW (in: lpString1=0x432ea4, lpString2="6C", iMaxLength=1024 | out: lpString1="6C") returned="6C" [0075.047] lstrlenW (lpString="6C") returned 2 [0075.047] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="l") returned 1 [0075.047] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.047] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.047] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.047] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.047] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.047] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.047] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.047] lstrcpynW (in: lpString1=0x432ea0, lpString2="l", iMaxLength=1024 | out: lpString1="l") returned="l" [0075.047] lstrlenW (lpString="l") returned 1 [0075.047] lstrcpynW (in: lpString1=0x40b5f0, lpString2="l", iMaxLength=1024 | out: lpString1="l") returned="l" [0075.047] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.048] lstrcmpiW (lpString1="l", lpString2="^") returned 1 [0075.048] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.048] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.048] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.048] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.048] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.048] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.048] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.048] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.048] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAl", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAl") returned="KERNEL32::VirtualAl" [0075.048] lstrlenW (lpString="KERNEL32::VirtualAl") returned 19 [0075.048] lstrcpynW (in: lpString1=0x432ec6, lpString2="l", iMaxLength=1024 | out: lpString1="l") returned="l" [0075.048] lstrlenW (lpString="l") returned 1 [0075.048] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAll", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAll") returned="KERNEL32::VirtualAll" [0075.048] lstrlenW (lpString="KERNEL32::VirtualAll") returned 20 [0075.048] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAll", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAll") returned="KERNEL32::VirtualAll" [0075.048] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.048] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.048] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.049] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.049] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.049] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.049] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.049] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.049] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.049] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.049] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.049] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.049] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.049] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.049] lstrlenW (lpString="C:\\Windows") returned 10 [0075.049] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.050] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.050] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.050] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.050] lstrlenW (lpString="524386") returned 6 [0075.050] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.050] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.050] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.050] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.050] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.050] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.050] lstrlenW (lpString="6") returned 1 [0075.050] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.050] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.050] lstrlenW (lpString="8") returned 1 [0075.050] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.050] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.050] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.050] lstrlenW (lpString="Execute: ") returned 9 [0075.050] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.050] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.050] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.051] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x25 [0075.051] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x25 [0075.051] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x25, lParam=0x0) returned 0x1 [0075.052] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.052] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.052] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.052] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.052] lstrcpynW (in: lpString1=0x432ea0, lpString2="184", iMaxLength=1024 | out: lpString1="184") returned="184" [0075.052] lstrlenW (lpString="184") returned 3 [0075.052] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="192") returned 3 [0075.052] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.052] lstrlenW (lpString="") returned 0 [0075.052] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.052] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.052] lstrcpynW (in: lpString1=0x432ea0, lpString2="192", iMaxLength=1024 | out: lpString1="192") returned="192" [0075.052] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.052] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.053] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.053] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.053] lstrcpynW (in: lpString1=0x432ea4, lpString2="9AEB5DF5", iMaxLength=1024 | out: lpString1="9AEB5DF5") returned="9AEB5DF5" [0075.053] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1868769385") returned 10 [0075.053] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.053] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.053] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.053] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.053] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.053] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.053] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.053] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.053] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.053] lstrcpynW (in: lpString1=0x432ea0, lpString2="1868769385", iMaxLength=1024 | out: lpString1="1868769385") returned="1868769385" [0075.053] lstrlenW (lpString="1868769385") returned 10 [0075.054] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="6F632869") returned 8 [0075.054] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.054] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.054] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.054] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.054] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.054] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.054] lstrlenW (lpString="0") returned 1 [0075.054] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.054] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.054] lstrlenW (lpString="0") returned 1 [0075.054] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.054] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.054] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.054] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.054] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.054] lstrlenW (lpString="0") returned 1 [0075.054] lstrcpynW (in: lpString1=0x432ea0, lpString2="6F632869", iMaxLength=1024 | out: lpString1="6F632869") returned="6F632869" [0075.054] lstrlenW (lpString="6F632869") returned 8 [0075.055] lstrcpynW (in: lpString1=0x40a5f0, lpString2="6F632869", iMaxLength=1024 | out: lpString1="6F632869") returned="6F632869" [0075.055] lstrlenW (lpString="6F632869") returned 8 [0075.055] lstrcpynW (in: lpString1=0x46b000, lpString2="6F632869", iMaxLength=1024 | out: lpString1="6F632869") returned="6F632869" [0075.055] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.055] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.055] lstrlenW (lpString="") returned 0 [0075.055] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.055] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.055] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.055] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.055] lstrcpynW (in: lpString1=0x432ea4, lpString2="6F", iMaxLength=1024 | out: lpString1="6F") returned="6F" [0075.055] lstrlenW (lpString="6F") returned 2 [0075.055] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="o") returned 1 [0075.055] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.055] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.055] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.055] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.055] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.055] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.056] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.056] lstrcpynW (in: lpString1=0x432ea0, lpString2="o", iMaxLength=1024 | out: lpString1="o") returned="o" [0075.056] lstrlenW (lpString="o") returned 1 [0075.056] lstrcpynW (in: lpString1=0x40b5f0, lpString2="o", iMaxLength=1024 | out: lpString1="o") returned="o" [0075.056] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.056] lstrcmpiW (lpString1="o", lpString2="^") returned 1 [0075.056] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.056] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.056] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.056] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.056] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.056] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.056] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.056] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.056] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAll", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAll") returned="KERNEL32::VirtualAll" [0075.056] lstrlenW (lpString="KERNEL32::VirtualAll") returned 20 [0075.056] lstrcpynW (in: lpString1=0x432ec8, lpString2="o", iMaxLength=1024 | out: lpString1="o") returned="o" [0075.057] lstrlenW (lpString="o") returned 1 [0075.057] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAllo", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAllo") returned="KERNEL32::VirtualAllo" [0075.057] lstrlenW (lpString="KERNEL32::VirtualAllo") returned 21 [0075.057] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAllo", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAllo") returned="KERNEL32::VirtualAllo" [0075.057] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.057] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.057] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.057] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.057] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.057] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.057] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.057] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.057] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.057] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.058] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.058] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.058] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.058] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.058] lstrlenW (lpString="C:\\Windows") returned 10 [0075.058] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.058] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.058] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.058] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.058] lstrlenW (lpString="524386") returned 6 [0075.058] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.058] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.058] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.058] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.058] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.058] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.058] lstrlenW (lpString="0") returned 1 [0075.059] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.059] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.059] lstrlenW (lpString="2") returned 1 [0075.059] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.059] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.059] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.059] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.059] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.059] lstrlenW (lpString="2") returned 1 [0075.059] lstrcpynW (in: lpString1=0x432ea0, lpString2="6F632869", iMaxLength=1024 | out: lpString1="6F632869") returned="6F632869" [0075.059] lstrlenW (lpString="6F632869") returned 8 [0075.059] lstrcpynW (in: lpString1=0x40a5f0, lpString2="6F632869", iMaxLength=1024 | out: lpString1="6F632869") returned="6F632869" [0075.059] lstrlenW (lpString="6F632869") returned 8 [0075.059] lstrcpynW (in: lpString1=0x46b000, lpString2="632869", iMaxLength=1024 | out: lpString1="632869") returned="632869" [0075.059] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.059] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.059] lstrlenW (lpString="") returned 0 [0075.059] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.059] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.059] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.059] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.059] lstrcpynW (in: lpString1=0x432ea4, lpString2="63", iMaxLength=1024 | out: lpString1="63") returned="63" [0075.059] lstrlenW (lpString="63") returned 2 [0075.059] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="c") returned 1 [0075.059] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.060] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.060] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.060] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.060] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.060] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.060] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.060] lstrcpynW (in: lpString1=0x432ea0, lpString2="c", iMaxLength=1024 | out: lpString1="c") returned="c" [0075.060] lstrlenW (lpString="c") returned 1 [0075.060] lstrcpynW (in: lpString1=0x40b5f0, lpString2="c", iMaxLength=1024 | out: lpString1="c") returned="c" [0075.060] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.060] lstrcmpiW (lpString1="c", lpString2="^") returned 1 [0075.060] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.060] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.060] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.060] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.060] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.060] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.061] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.061] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.061] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAllo", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAllo") returned="KERNEL32::VirtualAllo" [0075.061] lstrlenW (lpString="KERNEL32::VirtualAllo") returned 21 [0075.061] lstrcpynW (in: lpString1=0x432eca, lpString2="c", iMaxLength=1024 | out: lpString1="c") returned="c" [0075.061] lstrlenW (lpString="c") returned 1 [0075.061] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc") returned="KERNEL32::VirtualAlloc" [0075.061] lstrlenW (lpString="KERNEL32::VirtualAlloc") returned 22 [0075.061] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc") returned="KERNEL32::VirtualAlloc" [0075.061] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.061] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.061] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.061] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.061] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.061] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.061] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.061] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.062] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.062] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.062] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.062] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.062] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.062] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.062] lstrlenW (lpString="C:\\Windows") returned 10 [0075.062] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.062] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.062] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.062] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.062] lstrlenW (lpString="524386") returned 6 [0075.062] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.063] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.063] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.063] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.063] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.063] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.063] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.063] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.063] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.063] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.063] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.063] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="(") returned 1 [0075.063] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.063] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.063] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.063] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.063] lstrcmpiW (lpString1="(", lpString2="^") returned -1 [0075.063] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.063] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.064] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.064] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.064] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.064] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.064] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.064] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.064] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc") returned="KERNEL32::VirtualAlloc" [0075.064] lstrlenW (lpString="KERNEL32::VirtualAlloc") returned 22 [0075.064] lstrcpynW (in: lpString1=0x432ecc, lpString2="(", iMaxLength=1024 | out: lpString1="(") returned="(" [0075.064] lstrlenW (lpString="(") returned 1 [0075.064] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(") returned="KERNEL32::VirtualAlloc(" [0075.064] lstrlenW (lpString="KERNEL32::VirtualAlloc(") returned 23 [0075.064] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(") returned="KERNEL32::VirtualAlloc(" [0075.064] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.064] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.064] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.065] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.065] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.065] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.065] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.065] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.065] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.065] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.065] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.065] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.065] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.065] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.065] lstrlenW (lpString="C:\\Windows") returned 10 [0075.066] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.066] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.066] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.066] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.066] lstrlenW (lpString="524386") returned 6 [0075.066] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.066] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.066] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.066] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.066] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.066] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.066] lstrlenW (lpString="4") returned 1 [0075.066] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.066] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.066] lstrlenW (lpString="6") returned 1 [0075.066] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.066] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.066] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.066] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.066] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.066] lstrlenW (lpString="6") returned 1 [0075.066] lstrcpynW (in: lpString1=0x432ea0, lpString2="6F632869", iMaxLength=1024 | out: lpString1="6F632869") returned="6F632869" [0075.066] lstrlenW (lpString="6F632869") returned 8 [0075.066] lstrcpynW (in: lpString1=0x40a5f0, lpString2="6F632869", iMaxLength=1024 | out: lpString1="6F632869") returned="6F632869" [0075.067] lstrlenW (lpString="6F632869") returned 8 [0075.067] lstrcpynW (in: lpString1=0x46b000, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0075.067] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.067] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.067] lstrlenW (lpString="") returned 0 [0075.067] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.067] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.067] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.067] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.067] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0075.067] lstrlenW (lpString="69") returned 2 [0075.067] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0075.067] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.067] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.067] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.067] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.067] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.067] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.067] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.067] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.067] lstrlenW (lpString="i") returned 1 [0075.067] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.067] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.068] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0075.068] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.068] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.068] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.068] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.068] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.068] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.068] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.068] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.068] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(") returned="KERNEL32::VirtualAlloc(" [0075.068] lstrlenW (lpString="KERNEL32::VirtualAlloc(") returned 23 [0075.068] lstrcpynW (in: lpString1=0x432ece, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.068] lstrlenW (lpString="i") returned 1 [0075.068] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i") returned="KERNEL32::VirtualAlloc(i" [0075.068] lstrlenW (lpString="KERNEL32::VirtualAlloc(i") returned 24 [0075.068] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i") returned="KERNEL32::VirtualAlloc(i" [0075.068] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.068] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.069] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.069] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.069] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.069] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.069] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.069] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.069] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.069] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.069] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.069] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.069] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.069] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.069] lstrlenW (lpString="C:\\Windows") returned 10 [0075.069] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.070] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.070] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.070] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.070] lstrlenW (lpString="524386") returned 6 [0075.070] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.070] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.070] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.070] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.070] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.070] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.070] lstrlenW (lpString="6") returned 1 [0075.070] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.070] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.070] lstrlenW (lpString="8") returned 1 [0075.070] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.070] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.070] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.070] lstrlenW (lpString="Execute: ") returned 9 [0075.070] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.070] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.070] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.071] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x26 [0075.071] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x26 [0075.071] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x26, lParam=0x0) returned 0x1 [0075.072] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.072] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.072] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.072] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.072] lstrcpynW (in: lpString1=0x432ea0, lpString2="192", iMaxLength=1024 | out: lpString1="192") returned="192" [0075.072] lstrlenW (lpString="192") returned 3 [0075.072] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="200") returned 3 [0075.072] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.072] lstrlenW (lpString="") returned 0 [0075.072] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.072] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.072] lstrcpynW (in: lpString1=0x432ea0, lpString2="200", iMaxLength=1024 | out: lpString1="200") returned="200" [0075.072] lstrlenW (lpString="200") returned 3 [0075.072] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0075.072] lstrlenW (lpString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returned 1023 [0075.072] lstrcpynW (in: lpString1=0x40a5f0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0075.072] lstrlenW (lpString="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned 1023 [0075.073] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.073] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.073] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.073] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.073] lstrcpynW (in: lpString1=0x432ea4, lpString2="C5A41CBC", iMaxLength=1024 | out: lpString1="C5A41CBC") returned="C5A41CBC" [0075.073] lstrlenW (lpString="C5A41CBC") returned 8 [0075.073] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="808216864") returned 9 [0075.073] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.073] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.073] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.073] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.073] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.073] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.073] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.074] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.074] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.074] lstrcpynW (in: lpString1=0x432ea0, lpString2="808216864", iMaxLength=1024 | out: lpString1="808216864") returned="808216864" [0075.074] lstrlenW (lpString="808216864") returned 9 [0075.074] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="302C6920") returned 8 [0075.074] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.074] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.074] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.074] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.074] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.074] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.074] lstrlenW (lpString="0") returned 1 [0075.074] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.074] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.075] lstrlenW (lpString="0") returned 1 [0075.075] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.075] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.075] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.075] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.075] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.075] lstrlenW (lpString="0") returned 1 [0075.075] lstrcpynW (in: lpString1=0x432ea0, lpString2="302C6920", iMaxLength=1024 | out: lpString1="302C6920") returned="302C6920" [0075.075] lstrlenW (lpString="302C6920") returned 8 [0075.075] lstrcpynW (in: lpString1=0x40a5f0, lpString2="302C6920", iMaxLength=1024 | out: lpString1="302C6920") returned="302C6920" [0075.075] lstrlenW (lpString="302C6920") returned 8 [0075.075] lstrcpynW (in: lpString1=0x46b000, lpString2="302C6920", iMaxLength=1024 | out: lpString1="302C6920") returned="302C6920" [0075.075] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.075] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.075] lstrlenW (lpString="") returned 0 [0075.075] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.075] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.075] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.075] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.075] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.075] lstrlenW (lpString="30") returned 2 [0075.075] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0075.075] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.075] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.075] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.076] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.076] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.076] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.076] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.076] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.076] lstrlenW (lpString="0") returned 1 [0075.076] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.076] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.076] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0075.076] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.076] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.076] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.076] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.076] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.076] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.077] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.077] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.077] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i") returned="KERNEL32::VirtualAlloc(i" [0075.077] lstrlenW (lpString="KERNEL32::VirtualAlloc(i") returned 24 [0075.077] lstrcpynW (in: lpString1=0x432ed0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.077] lstrlenW (lpString="0") returned 1 [0075.077] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0") returned="KERNEL32::VirtualAlloc(i0" [0075.077] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0") returned 25 [0075.077] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0") returned="KERNEL32::VirtualAlloc(i0" [0075.077] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.077] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.077] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.077] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.078] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.078] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.078] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.078] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.078] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.078] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.078] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.078] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.078] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.078] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.078] lstrlenW (lpString="C:\\Windows") returned 10 [0075.079] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.079] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.079] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.079] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.079] lstrlenW (lpString="524386") returned 6 [0075.079] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.079] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.079] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.079] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.079] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.079] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.079] lstrlenW (lpString="0") returned 1 [0075.079] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.079] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.079] lstrlenW (lpString="2") returned 1 [0075.079] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.079] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.079] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.079] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.079] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.079] lstrlenW (lpString="2") returned 1 [0075.079] lstrcpynW (in: lpString1=0x432ea0, lpString2="302C6920", iMaxLength=1024 | out: lpString1="302C6920") returned="302C6920" [0075.079] lstrlenW (lpString="302C6920") returned 8 [0075.079] lstrcpynW (in: lpString1=0x40a5f0, lpString2="302C6920", iMaxLength=1024 | out: lpString1="302C6920") returned="302C6920" [0075.080] lstrlenW (lpString="302C6920") returned 8 [0075.080] lstrcpynW (in: lpString1=0x46b000, lpString2="2C6920", iMaxLength=1024 | out: lpString1="2C6920") returned="2C6920" [0075.080] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.080] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.080] lstrlenW (lpString="") returned 0 [0075.080] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.080] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.080] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.080] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.080] lstrcpynW (in: lpString1=0x432ea4, lpString2="2C", iMaxLength=1024 | out: lpString1="2C") returned="2C" [0075.080] lstrlenW (lpString="2C") returned 2 [0075.080] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=",") returned 1 [0075.080] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.080] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.080] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.080] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.080] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.080] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.080] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.080] lstrcpynW (in: lpString1=0x432ea0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0075.080] lstrlenW (lpString=",") returned 1 [0075.081] lstrcpynW (in: lpString1=0x40b5f0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0075.081] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.081] lstrcmpiW (lpString1=",", lpString2="^") returned -1 [0075.081] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.081] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.081] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.081] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.081] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.081] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.081] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.081] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.081] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0") returned="KERNEL32::VirtualAlloc(i0" [0075.081] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0") returned 25 [0075.081] lstrcpynW (in: lpString1=0x432ed2, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0075.082] lstrlenW (lpString=",") returned 1 [0075.082] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,") returned="KERNEL32::VirtualAlloc(i0," [0075.082] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,") returned 26 [0075.082] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,") returned="KERNEL32::VirtualAlloc(i0," [0075.082] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.082] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.082] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.082] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.082] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.082] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.082] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.082] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.082] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.082] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.083] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.083] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.083] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.083] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.083] lstrlenW (lpString="C:\\Windows") returned 10 [0075.083] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.083] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.083] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.083] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.083] lstrlenW (lpString="524386") returned 6 [0075.083] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.083] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.083] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.083] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.083] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.083] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.083] lstrlenW (lpString="2") returned 1 [0075.083] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.084] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.084] lstrlenW (lpString="4") returned 1 [0075.084] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.084] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.084] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.084] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.084] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.084] lstrlenW (lpString="4") returned 1 [0075.084] lstrcpynW (in: lpString1=0x432ea0, lpString2="302C6920", iMaxLength=1024 | out: lpString1="302C6920") returned="302C6920" [0075.084] lstrlenW (lpString="302C6920") returned 8 [0075.084] lstrcpynW (in: lpString1=0x40a5f0, lpString2="302C6920", iMaxLength=1024 | out: lpString1="302C6920") returned="302C6920" [0075.084] lstrlenW (lpString="302C6920") returned 8 [0075.084] lstrcpynW (in: lpString1=0x46b000, lpString2="6920", iMaxLength=1024 | out: lpString1="6920") returned="6920" [0075.084] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.084] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.084] lstrlenW (lpString="") returned 0 [0075.084] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.084] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.084] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.084] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.084] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0075.084] lstrlenW (lpString="69") returned 2 [0075.084] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0075.084] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.084] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.085] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.085] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.085] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.085] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.085] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.085] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.085] lstrlenW (lpString="i") returned 1 [0075.085] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.085] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.085] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0075.085] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.085] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.085] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.085] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.085] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.086] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.086] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.086] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.086] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,") returned="KERNEL32::VirtualAlloc(i0," [0075.086] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,") returned 26 [0075.086] lstrcpynW (in: lpString1=0x432ed4, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.086] lstrlenW (lpString="i") returned 1 [0075.086] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i") returned="KERNEL32::VirtualAlloc(i0,i" [0075.086] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i") returned 27 [0075.086] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i") returned="KERNEL32::VirtualAlloc(i0,i" [0075.086] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.086] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.086] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.086] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.086] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.087] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.087] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.087] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.087] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.087] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.087] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.087] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.087] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.087] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.088] lstrlenW (lpString="C:\\Windows") returned 10 [0075.088] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.088] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.088] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.088] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.088] lstrlenW (lpString="524386") returned 6 [0075.088] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.088] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.088] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.088] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.088] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.088] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.088] lstrlenW (lpString="4") returned 1 [0075.088] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.088] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.088] lstrlenW (lpString="6") returned 1 [0075.088] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.088] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.088] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.088] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.088] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.088] lstrlenW (lpString="6") returned 1 [0075.088] lstrcpynW (in: lpString1=0x432ea0, lpString2="302C6920", iMaxLength=1024 | out: lpString1="302C6920") returned="302C6920" [0075.088] lstrlenW (lpString="302C6920") returned 8 [0075.089] lstrcpynW (in: lpString1=0x40a5f0, lpString2="302C6920", iMaxLength=1024 | out: lpString1="302C6920") returned="302C6920" [0075.089] lstrlenW (lpString="302C6920") returned 8 [0075.089] lstrcpynW (in: lpString1=0x46b000, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0075.089] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.089] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.089] lstrlenW (lpString="") returned 0 [0075.089] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.089] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.089] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.089] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.089] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0075.089] lstrlenW (lpString="20") returned 2 [0075.089] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0075.089] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.089] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.089] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.089] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.089] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.089] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.089] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.089] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.089] lstrlenW (lpString=" ") returned 1 [0075.089] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.089] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.089] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0075.089] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.090] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.090] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.090] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.090] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.090] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.090] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.090] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.090] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i") returned="KERNEL32::VirtualAlloc(i0,i" [0075.090] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i") returned 27 [0075.090] lstrcpynW (in: lpString1=0x432ed6, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.090] lstrlenW (lpString=" ") returned 1 [0075.090] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i ", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i ") returned="KERNEL32::VirtualAlloc(i0,i " [0075.090] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i ") returned 28 [0075.090] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i ", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i ") returned="KERNEL32::VirtualAlloc(i0,i " [0075.090] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.090] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.090] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.090] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.091] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.091] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.091] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.091] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.091] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.091] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.091] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.091] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.091] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.091] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.091] lstrlenW (lpString="C:\\Windows") returned 10 [0075.091] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.091] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.091] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.092] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.092] lstrlenW (lpString="524386") returned 6 [0075.092] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.092] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.092] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.092] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.092] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.092] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.092] lstrlenW (lpString="6") returned 1 [0075.092] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.092] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.092] lstrlenW (lpString="8") returned 1 [0075.092] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.092] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.092] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.092] lstrlenW (lpString="Execute: ") returned 9 [0075.092] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.092] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.092] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.093] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x27 [0075.093] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x27 [0075.093] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x27, lParam=0x0) returned 0x1 [0075.093] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.093] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.093] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.093] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.093] lstrcpynW (in: lpString1=0x432ea0, lpString2="200", iMaxLength=1024 | out: lpString1="200") returned="200" [0075.094] lstrlenW (lpString="200") returned 3 [0075.094] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="208") returned 3 [0075.094] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.094] lstrlenW (lpString="") returned 0 [0075.094] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.094] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.094] lstrcpynW (in: lpString1=0x432ea0, lpString2="208", iMaxLength=1024 | out: lpString1="208") returned="208" [0075.094] lstrlenW (lpString="208") returned 3 [0075.094] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.094] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.094] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString1="C5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.094] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.094] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.094] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.094] lstrcpynW (in: lpString1=0x432ea4, lpString2="C5F044AC", iMaxLength=1024 | out: lpString1="C5F044AC") returned="C5F044AC" [0075.094] lstrlenW (lpString="C5F044AC") returned 8 [0075.094] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="813183280") returned 9 [0075.094] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.094] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.094] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.095] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.095] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.095] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.095] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.095] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.095] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.095] lstrcpynW (in: lpString1=0x432ea0, lpString2="813183280", iMaxLength=1024 | out: lpString1="813183280") returned="813183280" [0075.095] lstrlenW (lpString="813183280") returned 9 [0075.095] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="30783130") returned 8 [0075.095] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.095] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.095] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.095] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.096] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.096] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.096] lstrlenW (lpString="0") returned 1 [0075.096] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.096] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.096] lstrlenW (lpString="0") returned 1 [0075.096] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.096] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.096] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.096] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.096] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.096] lstrlenW (lpString="0") returned 1 [0075.096] lstrcpynW (in: lpString1=0x432ea0, lpString2="30783130", iMaxLength=1024 | out: lpString1="30783130") returned="30783130" [0075.096] lstrlenW (lpString="30783130") returned 8 [0075.096] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30783130", iMaxLength=1024 | out: lpString1="30783130") returned="30783130" [0075.096] lstrlenW (lpString="30783130") returned 8 [0075.096] lstrcpynW (in: lpString1=0x46b000, lpString2="30783130", iMaxLength=1024 | out: lpString1="30783130") returned="30783130" [0075.096] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.096] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.096] lstrlenW (lpString="") returned 0 [0075.096] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.096] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.096] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.096] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.096] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.096] lstrlenW (lpString="30") returned 2 [0075.096] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0075.096] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.096] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.096] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.097] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.097] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.097] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.097] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.097] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.097] lstrlenW (lpString="0") returned 1 [0075.097] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.097] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.097] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0075.097] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.097] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.097] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.097] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.097] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.097] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.097] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.097] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.098] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i ", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i ") returned="KERNEL32::VirtualAlloc(i0,i " [0075.098] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i ") returned 28 [0075.098] lstrcpynW (in: lpString1=0x432ed8, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.098] lstrlenW (lpString="0") returned 1 [0075.098] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0") returned="KERNEL32::VirtualAlloc(i0,i 0" [0075.098] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0") returned 29 [0075.098] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0") returned="KERNEL32::VirtualAlloc(i0,i 0" [0075.098] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.098] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.098] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.098] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.098] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.098] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.098] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.098] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.098] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.098] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.099] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.099] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.099] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.099] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.099] lstrlenW (lpString="C:\\Windows") returned 10 [0075.099] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.099] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.099] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.099] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.099] lstrlenW (lpString="524386") returned 6 [0075.099] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.099] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.099] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.099] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.099] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.099] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.099] lstrlenW (lpString="0") returned 1 [0075.099] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.100] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.100] lstrlenW (lpString="2") returned 1 [0075.100] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.100] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.100] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.100] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.100] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.100] lstrlenW (lpString="2") returned 1 [0075.100] lstrcpynW (in: lpString1=0x432ea0, lpString2="30783130", iMaxLength=1024 | out: lpString1="30783130") returned="30783130" [0075.100] lstrlenW (lpString="30783130") returned 8 [0075.100] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30783130", iMaxLength=1024 | out: lpString1="30783130") returned="30783130" [0075.100] lstrlenW (lpString="30783130") returned 8 [0075.100] lstrcpynW (in: lpString1=0x46b000, lpString2="783130", iMaxLength=1024 | out: lpString1="783130") returned="783130" [0075.100] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.100] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.100] lstrlenW (lpString="") returned 0 [0075.100] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.100] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.100] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.100] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.100] lstrcpynW (in: lpString1=0x432ea4, lpString2="78", iMaxLength=1024 | out: lpString1="78") returned="78" [0075.100] lstrlenW (lpString="78") returned 2 [0075.100] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="x") returned 1 [0075.100] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.100] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.100] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.101] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.101] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.101] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.101] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.101] lstrcpynW (in: lpString1=0x432ea0, lpString2="x", iMaxLength=1024 | out: lpString1="x") returned="x" [0075.101] lstrlenW (lpString="x") returned 1 [0075.101] lstrcpynW (in: lpString1=0x40b5f0, lpString2="x", iMaxLength=1024 | out: lpString1="x") returned="x" [0075.101] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.101] lstrcmpiW (lpString1="x", lpString2="^") returned 1 [0075.101] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.101] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.101] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.101] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.101] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.101] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.102] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.102] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.102] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.102] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.102] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.102] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.102] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.103] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.103] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.103] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.103] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.103] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.103] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.103] lstrlenW (lpString="C:\\Windows") returned 10 [0075.103] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.103] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.103] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.103] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.103] lstrlenW (lpString="524386") returned 6 [0075.103] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.103] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.103] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.104] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.104] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.104] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.104] lstrlenW (lpString="2") returned 1 [0075.104] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.104] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.104] lstrlenW (lpString="4") returned 1 [0075.104] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.104] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.104] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.104] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.104] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.104] lstrlenW (lpString="4") returned 1 [0075.104] lstrcpynW (in: lpString1=0x432ea0, lpString2="30783130", iMaxLength=1024 | out: lpString1="30783130") returned="30783130" [0075.104] lstrlenW (lpString="30783130") returned 8 [0075.104] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30783130", iMaxLength=1024 | out: lpString1="30783130") returned="30783130" [0075.104] lstrlenW (lpString="30783130") returned 8 [0075.104] lstrcpynW (in: lpString1=0x46b000, lpString2="3130", iMaxLength=1024 | out: lpString1="3130") returned="3130" [0075.104] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.104] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.104] lstrlenW (lpString="") returned 0 [0075.104] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.104] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.104] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.104] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.104] lstrcpynW (in: lpString1=0x432ea4, lpString2="31", iMaxLength=1024 | out: lpString1="31") returned="31" [0075.104] lstrlenW (lpString="31") returned 2 [0075.104] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="1") returned 1 [0075.105] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.105] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.105] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.105] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.105] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.105] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.105] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.105] lstrcpynW (in: lpString1=0x432ea0, lpString2="1", iMaxLength=1024 | out: lpString1="1") returned="1" [0075.105] lstrlenW (lpString="1") returned 1 [0075.105] lstrcpynW (in: lpString1=0x40b5f0, lpString2="1", iMaxLength=1024 | out: lpString1="1") returned="1" [0075.105] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.105] lstrcmpiW (lpString1="1", lpString2="^") returned 1 [0075.105] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.105] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.105] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.105] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.105] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.105] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.106] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.106] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.106] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x") returned="KERNEL32::VirtualAlloc(i0,i 0x" [0075.106] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x") returned 30 [0075.106] lstrcpynW (in: lpString1=0x432edc, lpString2="1", iMaxLength=1024 | out: lpString1="1") returned="1" [0075.106] lstrlenW (lpString="1") returned 1 [0075.106] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x1", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x1") returned="KERNEL32::VirtualAlloc(i0,i 0x1" [0075.106] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x1") returned 31 [0075.106] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0x1", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x1") returned="KERNEL32::VirtualAlloc(i0,i 0x1" [0075.106] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.106] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.106] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.106] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.106] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.106] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.106] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.106] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.107] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.107] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.107] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.107] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.107] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.107] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.107] lstrlenW (lpString="C:\\Windows") returned 10 [0075.107] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.107] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.107] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.107] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.107] lstrlenW (lpString="524386") returned 6 [0075.107] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.107] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.107] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.107] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.107] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.108] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.108] lstrlenW (lpString="4") returned 1 [0075.108] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.108] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.108] lstrlenW (lpString="6") returned 1 [0075.108] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.108] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.108] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.108] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.108] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.108] lstrlenW (lpString="6") returned 1 [0075.108] lstrcpynW (in: lpString1=0x432ea0, lpString2="30783130", iMaxLength=1024 | out: lpString1="30783130") returned="30783130" [0075.108] lstrlenW (lpString="30783130") returned 8 [0075.108] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30783130", iMaxLength=1024 | out: lpString1="30783130") returned="30783130" [0075.108] lstrlenW (lpString="30783130") returned 8 [0075.108] lstrcpynW (in: lpString1=0x46b000, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.108] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.108] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.108] lstrlenW (lpString="") returned 0 [0075.108] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.108] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.108] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.108] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.108] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.108] lstrlenW (lpString="30") returned 2 [0075.108] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0075.108] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.108] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.108] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.109] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.109] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.109] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.109] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.109] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.109] lstrlenW (lpString="0") returned 1 [0075.109] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.109] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.109] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0075.109] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.109] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.109] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.109] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.109] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.109] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.109] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.110] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.110] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x1", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x1") returned="KERNEL32::VirtualAlloc(i0,i 0x1" [0075.110] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x1") returned 31 [0075.110] lstrcpynW (in: lpString1=0x432ede, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.110] lstrlenW (lpString="0") returned 1 [0075.110] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x10", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x10") returned="KERNEL32::VirtualAlloc(i0,i 0x10" [0075.110] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x10") returned 32 [0075.110] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0x10", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x10") returned="KERNEL32::VirtualAlloc(i0,i 0x10" [0075.110] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.110] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.110] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.110] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.110] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.110] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.110] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.110] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.111] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.111] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.111] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.111] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.111] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.111] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.111] lstrlenW (lpString="C:\\Windows") returned 10 [0075.111] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.111] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.111] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.111] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.111] lstrlenW (lpString="524386") returned 6 [0075.111] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.112] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.112] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.112] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.112] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.112] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.112] lstrlenW (lpString="6") returned 1 [0075.112] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.112] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.112] lstrlenW (lpString="8") returned 1 [0075.112] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.112] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.112] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.112] lstrlenW (lpString="Execute: ") returned 9 [0075.112] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.112] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.112] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.112] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x28 [0075.113] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x28 [0075.113] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x28, lParam=0x0) returned 0x1 [0075.113] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.113] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.113] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.113] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.114] lstrcpynW (in: lpString1=0x432ea0, lpString2="208", iMaxLength=1024 | out: lpString1="208") returned="208" [0075.114] lstrlenW (lpString="208") returned 3 [0075.114] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="216") returned 3 [0075.114] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.114] lstrlenW (lpString="") returned 0 [0075.114] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.114] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.114] lstrcpynW (in: lpString1=0x432ea0, lpString2="216", iMaxLength=1024 | out: lpString1="216") returned="216" [0075.114] lstrlenW (lpString="216") returned 3 [0075.114] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.114] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0075.114] lstrlenW (lpString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returned 1023 [0075.114] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.114] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.114] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.114] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.115] lstrcpynW (in: lpString1=0x432ea4, lpString2="C5B845AC", iMaxLength=1024 | out: lpString1="C5B845AC") returned="C5B845AC" [0075.115] lstrlenW (lpString="C5B845AC") returned 8 [0075.115] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="808464432") returned 9 [0075.115] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.115] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.115] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.115] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.115] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.115] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.115] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.115] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.115] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.115] lstrcpynW (in: lpString1=0x432ea0, lpString2="808464432", iMaxLength=1024 | out: lpString1="808464432") returned="808464432" [0075.115] lstrlenW (lpString="808464432") returned 9 [0075.115] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="30303030") returned 8 [0075.115] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.116] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.116] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.116] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.116] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.116] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.116] lstrlenW (lpString="0") returned 1 [0075.116] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.116] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.116] lstrlenW (lpString="0") returned 1 [0075.116] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.116] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.116] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.116] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.116] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.116] lstrlenW (lpString="0") returned 1 [0075.116] lstrcpynW (in: lpString1=0x432ea0, lpString2="30303030", iMaxLength=1024 | out: lpString1="30303030") returned="30303030" [0075.116] lstrlenW (lpString="30303030") returned 8 [0075.116] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30303030", iMaxLength=1024 | out: lpString1="30303030") returned="30303030" [0075.116] lstrlenW (lpString="30303030") returned 8 [0075.116] lstrcpynW (in: lpString1=0x46b000, lpString2="30303030", iMaxLength=1024 | out: lpString1="30303030") returned="30303030" [0075.116] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.116] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.116] lstrlenW (lpString="") returned 0 [0075.116] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.116] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.117] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.117] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.117] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.117] lstrlenW (lpString="30") returned 2 [0075.117] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0075.117] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.117] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.117] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.117] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.117] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.117] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.117] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.117] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.117] lstrlenW (lpString="0") returned 1 [0075.117] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.117] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.117] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0075.117] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.117] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.117] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.118] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.118] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.118] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.119] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.119] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.119] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x10", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x10") returned="KERNEL32::VirtualAlloc(i0,i 0x10" [0075.119] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x10") returned 32 [0075.119] lstrcpynW (in: lpString1=0x432ee0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.119] lstrlenW (lpString="0") returned 1 [0075.119] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100") returned="KERNEL32::VirtualAlloc(i0,i 0x100" [0075.119] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100") returned 33 [0075.119] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100") returned="KERNEL32::VirtualAlloc(i0,i 0x100" [0075.119] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.119] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.119] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.119] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.119] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.119] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.119] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.119] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.119] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.120] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.120] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.120] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.120] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.120] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.120] lstrlenW (lpString="C:\\Windows") returned 10 [0075.120] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.120] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.120] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.120] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.120] lstrlenW (lpString="524386") returned 6 [0075.120] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.120] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.120] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.120] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.120] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.121] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.127] lstrlenW (lpString="0") returned 1 [0075.127] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.127] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.127] lstrlenW (lpString="2") returned 1 [0075.127] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.127] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.127] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.127] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.128] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.128] lstrlenW (lpString="2") returned 1 [0075.128] lstrcpynW (in: lpString1=0x432ea0, lpString2="30303030", iMaxLength=1024 | out: lpString1="30303030") returned="30303030" [0075.128] lstrlenW (lpString="30303030") returned 8 [0075.128] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30303030", iMaxLength=1024 | out: lpString1="30303030") returned="30303030" [0075.128] lstrlenW (lpString="30303030") returned 8 [0075.128] lstrcpynW (in: lpString1=0x46b000, lpString2="303030", iMaxLength=1024 | out: lpString1="303030") returned="303030" [0075.128] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.128] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.128] lstrlenW (lpString="") returned 0 [0075.128] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.128] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.128] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.128] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.128] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.128] lstrlenW (lpString="30") returned 2 [0075.128] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0075.128] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.128] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.128] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.129] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.129] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.129] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.129] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.129] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.129] lstrlenW (lpString="0") returned 1 [0075.129] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.129] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.129] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0075.129] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.130] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.130] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.130] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.130] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.130] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.130] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.130] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.130] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100") returned="KERNEL32::VirtualAlloc(i0,i 0x100" [0075.130] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100") returned 33 [0075.130] lstrcpynW (in: lpString1=0x432ee2, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.130] lstrlenW (lpString="0") returned 1 [0075.130] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x1000", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x1000") returned="KERNEL32::VirtualAlloc(i0,i 0x1000" [0075.130] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x1000") returned 34 [0075.130] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0x1000", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x1000") returned="KERNEL32::VirtualAlloc(i0,i 0x1000" [0075.130] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.131] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.131] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.131] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.131] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.131] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.131] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.131] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.131] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.131] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.131] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.131] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.131] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.132] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.132] lstrlenW (lpString="C:\\Windows") returned 10 [0075.132] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.132] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.132] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.132] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.132] lstrlenW (lpString="524386") returned 6 [0075.132] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.132] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.132] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.132] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.132] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.132] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.132] lstrlenW (lpString="2") returned 1 [0075.132] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.132] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.132] lstrlenW (lpString="4") returned 1 [0075.132] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.132] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.132] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.132] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.132] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.132] lstrlenW (lpString="4") returned 1 [0075.133] lstrcpynW (in: lpString1=0x432ea0, lpString2="30303030", iMaxLength=1024 | out: lpString1="30303030") returned="30303030" [0075.133] lstrlenW (lpString="30303030") returned 8 [0075.133] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30303030", iMaxLength=1024 | out: lpString1="30303030") returned="30303030" [0075.133] lstrlenW (lpString="30303030") returned 8 [0075.133] lstrcpynW (in: lpString1=0x46b000, lpString2="3030", iMaxLength=1024 | out: lpString1="3030") returned="3030" [0075.133] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.133] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.133] lstrlenW (lpString="") returned 0 [0075.133] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.133] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.133] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.133] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.133] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.133] lstrlenW (lpString="30") returned 2 [0075.133] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0075.133] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.133] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.133] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.133] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.133] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.133] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.134] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.134] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.134] lstrlenW (lpString="0") returned 1 [0075.134] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.134] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.134] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0075.134] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.134] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.134] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.134] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.134] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.134] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.135] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.135] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.135] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x1000", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x1000") returned="KERNEL32::VirtualAlloc(i0,i 0x1000" [0075.135] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x1000") returned 34 [0075.135] lstrcpynW (in: lpString1=0x432ee4, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.135] lstrlenW (lpString="0") returned 1 [0075.135] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x10000", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x10000") returned="KERNEL32::VirtualAlloc(i0,i 0x10000" [0075.135] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x10000") returned 35 [0075.135] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0x10000", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x10000") returned="KERNEL32::VirtualAlloc(i0,i 0x10000" [0075.135] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.135] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.135] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.135] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.135] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.135] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.136] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.136] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.136] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.136] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.136] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.136] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.136] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.136] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.136] lstrlenW (lpString="C:\\Windows") returned 10 [0075.136] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.136] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.137] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.137] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.137] lstrlenW (lpString="524386") returned 6 [0075.137] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.137] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.137] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.137] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.137] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.137] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.137] lstrlenW (lpString="4") returned 1 [0075.137] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.137] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.137] lstrlenW (lpString="6") returned 1 [0075.137] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.137] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.137] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.137] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.137] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.137] lstrlenW (lpString="6") returned 1 [0075.137] lstrcpynW (in: lpString1=0x432ea0, lpString2="30303030", iMaxLength=1024 | out: lpString1="30303030") returned="30303030" [0075.137] lstrlenW (lpString="30303030") returned 8 [0075.138] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30303030", iMaxLength=1024 | out: lpString1="30303030") returned="30303030" [0075.138] lstrlenW (lpString="30303030") returned 8 [0075.138] lstrcpynW (in: lpString1=0x46b000, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.138] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.138] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.138] lstrlenW (lpString="") returned 0 [0075.138] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.138] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.138] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.138] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.138] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.138] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0075.138] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.138] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.138] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.138] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.138] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.139] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.139] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.139] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.139] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.139] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.139] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0075.139] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.139] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.139] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.139] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.139] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.139] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.139] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.139] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.140] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x10000", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x10000") returned="KERNEL32::VirtualAlloc(i0,i 0x10000" [0075.140] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x10000") returned 35 [0075.140] lstrcpynW (in: lpString1=0x432ee6, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.140] lstrlenW (lpString="0") returned 1 [0075.140] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000") returned="KERNEL32::VirtualAlloc(i0,i 0x100000" [0075.140] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000") returned 36 [0075.140] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000") returned="KERNEL32::VirtualAlloc(i0,i 0x100000" [0075.140] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.140] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.140] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.140] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.140] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.140] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.140] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.140] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.141] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.141] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.141] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.141] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.141] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.141] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.141] lstrlenW (lpString="C:\\Windows") returned 10 [0075.141] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.141] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.141] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.141] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.141] lstrlenW (lpString="524386") returned 6 [0075.142] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.142] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.142] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.142] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.142] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.142] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.142] lstrlenW (lpString="6") returned 1 [0075.142] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.142] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.142] lstrlenW (lpString="8") returned 1 [0075.142] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.142] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.142] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.142] lstrlenW (lpString="Execute: ") returned 9 [0075.142] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.142] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.142] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.143] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x29 [0075.143] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x29 [0075.143] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x29, lParam=0x0) returned 0x1 [0075.144] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.144] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.144] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.144] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.144] lstrcpynW (in: lpString1=0x432ea0, lpString2="216", iMaxLength=1024 | out: lpString1="216") returned="216" [0075.144] lstrlenW (lpString="216") returned 3 [0075.144] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="224") returned 3 [0075.144] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.145] lstrlenW (lpString="") returned 0 [0075.145] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.145] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.145] lstrcpynW (in: lpString1=0x432ea0, lpString2="224", iMaxLength=1024 | out: lpString1="224") returned="224" [0075.145] lstrlenW (lpString="224") returned 3 [0075.145] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned 1023 [0075.145] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.145] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.145] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.145] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.145] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.145] lstrcpynW (in: lpString1=0x432ea4, lpString2="D9A81CBC", iMaxLength=1024 | out: lpString1="D9A81CBC") returned="D9A81CBC" [0075.145] lstrlenW (lpString="D9A81CBC") returned 8 [0075.145] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="740321568") returned 9 [0075.145] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.145] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.145] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.146] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.146] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.146] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.146] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.146] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.146] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.146] lstrcpynW (in: lpString1=0x432ea0, lpString2="740321568", iMaxLength=1024 | out: lpString1="740321568") returned="740321568" [0075.146] lstrlenW (lpString="740321568") returned 9 [0075.146] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="2C206920") returned 8 [0075.146] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.146] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.146] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.146] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.147] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.147] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.147] lstrlenW (lpString="0") returned 1 [0075.147] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.147] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.147] lstrlenW (lpString="0") returned 1 [0075.147] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.147] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.147] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.147] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.147] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.147] lstrlenW (lpString="0") returned 1 [0075.147] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0075.147] lstrlenW (lpString="2C206920") returned 8 [0075.147] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0075.147] lstrlenW (lpString="2C206920") returned 8 [0075.147] lstrcpynW (in: lpString1=0x46b000, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0075.147] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.147] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.147] lstrlenW (lpString="") returned 0 [0075.147] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.147] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.147] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.147] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.147] lstrcpynW (in: lpString1=0x432ea4, lpString2="2C", iMaxLength=1024 | out: lpString1="2C") returned="2C" [0075.147] lstrlenW (lpString="2C") returned 2 [0075.147] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=",") returned 1 [0075.147] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.147] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.148] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.148] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.148] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.148] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.148] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.148] lstrcpynW (in: lpString1=0x432ea0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0075.148] lstrlenW (lpString=",") returned 1 [0075.148] lstrcpynW (in: lpString1=0x40b5f0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0075.148] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.148] lstrcmpiW (lpString1=",", lpString2="^") returned -1 [0075.148] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.148] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.148] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.148] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.148] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.148] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.149] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.149] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.149] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000") returned="KERNEL32::VirtualAlloc(i0,i 0x100000" [0075.149] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000") returned 36 [0075.149] lstrcpynW (in: lpString1=0x432ee8, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0075.149] lstrlenW (lpString=",") returned 1 [0075.149] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000,", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000,") returned="KERNEL32::VirtualAlloc(i0,i 0x100000," [0075.149] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000,") returned 37 [0075.149] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000,", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000,") returned="KERNEL32::VirtualAlloc(i0,i 0x100000," [0075.149] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.149] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.149] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.149] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.149] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.149] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.149] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.149] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.150] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.150] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.150] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.150] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.150] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.150] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.150] lstrlenW (lpString="C:\\Windows") returned 10 [0075.150] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.150] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.150] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.150] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.150] lstrlenW (lpString="524386") returned 6 [0075.150] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.150] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.150] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.151] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.151] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.151] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.151] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.151] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.151] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.151] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.151] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.151] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0075.151] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.151] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.151] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.151] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.151] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0075.151] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.151] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.151] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.151] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.152] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.152] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.152] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.152] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.152] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000,", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000,") returned="KERNEL32::VirtualAlloc(i0,i 0x100000," [0075.152] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000,") returned 37 [0075.152] lstrcpynW (in: lpString1=0x432eea, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.152] lstrlenW (lpString=" ") returned 1 [0075.152] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, ", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, ") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, " [0075.152] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, ") returned 38 [0075.152] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, ", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, ") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, " [0075.152] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.152] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.152] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.152] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.152] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.152] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.152] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.153] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.153] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.153] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.153] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.153] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.153] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.153] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.153] lstrlenW (lpString="C:\\Windows") returned 10 [0075.153] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.153] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.153] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.153] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.153] lstrlenW (lpString="524386") returned 6 [0075.153] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.153] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.154] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.154] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.154] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.154] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.154] lstrlenW (lpString="2") returned 1 [0075.154] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.154] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.154] lstrlenW (lpString="4") returned 1 [0075.154] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.154] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.154] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.154] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.154] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.154] lstrlenW (lpString="4") returned 1 [0075.154] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0075.154] lstrlenW (lpString="2C206920") returned 8 [0075.154] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0075.154] lstrlenW (lpString="2C206920") returned 8 [0075.154] lstrcpynW (in: lpString1=0x46b000, lpString2="6920", iMaxLength=1024 | out: lpString1="6920") returned="6920" [0075.154] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.154] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.154] lstrlenW (lpString="") returned 0 [0075.154] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.154] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.154] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.154] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.154] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0075.154] lstrlenW (lpString="69") returned 2 [0075.154] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0075.154] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.155] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.155] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.155] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.155] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.155] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.155] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.155] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.155] lstrlenW (lpString="i") returned 1 [0075.155] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.155] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.155] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0075.155] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.155] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.155] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.155] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.155] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.155] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.156] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.156] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.156] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, ", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, ") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, " [0075.156] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, ") returned 38 [0075.156] lstrcpynW (in: lpString1=0x432eec, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.156] lstrlenW (lpString="i") returned 1 [0075.156] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i" [0075.156] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i") returned 39 [0075.156] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i" [0075.156] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.156] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.156] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.156] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.156] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.156] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.156] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.156] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.157] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.157] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.157] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.157] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.157] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.157] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.157] lstrlenW (lpString="C:\\Windows") returned 10 [0075.157] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.157] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.157] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.157] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.157] lstrlenW (lpString="524386") returned 6 [0075.157] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.157] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.158] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.158] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.158] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.158] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.158] lstrlenW (lpString="4") returned 1 [0075.158] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.158] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.158] lstrlenW (lpString="6") returned 1 [0075.158] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.158] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.158] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.158] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.158] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.158] lstrlenW (lpString="6") returned 1 [0075.158] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0075.158] lstrlenW (lpString="2C206920") returned 8 [0075.158] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0075.158] lstrlenW (lpString="2C206920") returned 8 [0075.158] lstrcpynW (in: lpString1=0x46b000, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0075.158] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.158] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.158] lstrlenW (lpString="") returned 0 [0075.158] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.158] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.158] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.158] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.158] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0075.158] lstrlenW (lpString="20") returned 2 [0075.159] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0075.159] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.159] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.159] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.159] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.159] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.159] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.159] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.159] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.159] lstrlenW (lpString=" ") returned 1 [0075.159] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.159] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.159] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0075.159] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.159] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.159] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.159] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.159] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.159] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.160] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.160] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.160] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i" [0075.160] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i") returned 39 [0075.160] lstrcpynW (in: lpString1=0x432eee, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.160] lstrlenW (lpString=" ") returned 1 [0075.160] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i ", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i ") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i " [0075.160] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i ") returned 40 [0075.160] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i ", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i ") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i " [0075.160] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.160] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.160] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.160] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.160] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.160] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.160] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.160] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.161] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.161] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.161] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.161] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.161] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.161] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.161] lstrlenW (lpString="C:\\Windows") returned 10 [0075.161] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.161] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.161] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.161] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.161] lstrlenW (lpString="524386") returned 6 [0075.161] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.161] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.161] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.161] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.162] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.162] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.162] lstrlenW (lpString="6") returned 1 [0075.162] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.162] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.162] lstrlenW (lpString="8") returned 1 [0075.162] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.162] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.162] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.162] lstrlenW (lpString="Execute: ") returned 9 [0075.162] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.162] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.162] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.162] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x2a [0075.163] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x2a [0075.163] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x2a, lParam=0x0) returned 0x1 [0075.163] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.163] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.163] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.163] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.163] lstrcpynW (in: lpString1=0x432ea0, lpString2="224", iMaxLength=1024 | out: lpString1="224") returned="224" [0075.163] lstrlenW (lpString="224") returned 3 [0075.163] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="232") returned 3 [0075.164] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.164] lstrlenW (lpString="") returned 0 [0075.164] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.164] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.164] lstrcpynW (in: lpString1=0x432ea0, lpString2="232", iMaxLength=1024 | out: lpString1="232") returned="232" [0075.164] lstrlenW (lpString="232") returned 3 [0075.164] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned 1023 [0075.164] lstrcpynW (in: lpString1=0x40a5f0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.164] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.164] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.164] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.164] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.164] lstrcpynW (in: lpString1=0x432ea4, lpString2="C5F046AC", iMaxLength=1024 | out: lpString1="C5F046AC") returned="C5F046AC" [0075.164] lstrlenW (lpString="C5F046AC") returned 8 [0075.164] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="813183792") returned 9 [0075.164] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.164] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.164] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.165] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.165] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.165] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.165] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.165] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.165] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.165] lstrcpynW (in: lpString1=0x432ea0, lpString2="813183792", iMaxLength=1024 | out: lpString1="813183792") returned="813183792" [0075.165] lstrlenW (lpString="813183792") returned 9 [0075.165] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="30783330") returned 8 [0075.165] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.165] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.166] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.166] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.166] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.166] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.166] lstrlenW (lpString="0") returned 1 [0075.166] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.166] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.166] lstrlenW (lpString="0") returned 1 [0075.166] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.166] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.166] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.166] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.166] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.166] lstrlenW (lpString="0") returned 1 [0075.166] lstrcpynW (in: lpString1=0x432ea0, lpString2="30783330", iMaxLength=1024 | out: lpString1="30783330") returned="30783330" [0075.166] lstrlenW (lpString="30783330") returned 8 [0075.166] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30783330", iMaxLength=1024 | out: lpString1="30783330") returned="30783330" [0075.166] lstrlenW (lpString="30783330") returned 8 [0075.166] lstrcpynW (in: lpString1=0x46b000, lpString2="30783330", iMaxLength=1024 | out: lpString1="30783330") returned="30783330" [0075.166] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.166] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.166] lstrlenW (lpString="") returned 0 [0075.166] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.166] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.167] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.167] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.167] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.167] lstrlenW (lpString="30") returned 2 [0075.167] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0075.167] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.167] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.167] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.167] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.167] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.167] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.167] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.167] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.167] lstrlenW (lpString="0") returned 1 [0075.167] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.167] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.167] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0075.167] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.167] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.167] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.168] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.168] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.168] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.168] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.168] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.168] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i ", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i ") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i " [0075.168] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i ") returned 40 [0075.168] lstrcpynW (in: lpString1=0x432ef0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.168] lstrlenW (lpString="0") returned 1 [0075.168] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0" [0075.168] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0") returned 41 [0075.168] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0" [0075.168] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.168] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.168] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.168] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.168] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.169] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.169] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.169] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.169] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.169] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.169] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.169] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.169] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.169] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.169] lstrlenW (lpString="C:\\Windows") returned 10 [0075.169] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.169] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.169] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.170] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.170] lstrlenW (lpString="524386") returned 6 [0075.170] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.170] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.170] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.170] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.170] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.170] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.170] lstrlenW (lpString="0") returned 1 [0075.170] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.170] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.170] lstrlenW (lpString="2") returned 1 [0075.170] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.170] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.170] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.170] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.170] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.170] lstrlenW (lpString="2") returned 1 [0075.170] lstrcpynW (in: lpString1=0x432ea0, lpString2="30783330", iMaxLength=1024 | out: lpString1="30783330") returned="30783330" [0075.170] lstrlenW (lpString="30783330") returned 8 [0075.170] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30783330", iMaxLength=1024 | out: lpString1="30783330") returned="30783330" [0075.170] lstrlenW (lpString="30783330") returned 8 [0075.170] lstrcpynW (in: lpString1=0x46b000, lpString2="783330", iMaxLength=1024 | out: lpString1="783330") returned="783330" [0075.170] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.170] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.170] lstrlenW (lpString="") returned 0 [0075.170] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.171] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.171] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.171] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.171] lstrcpynW (in: lpString1=0x432ea4, lpString2="78", iMaxLength=1024 | out: lpString1="78") returned="78" [0075.171] lstrlenW (lpString="78") returned 2 [0075.171] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="x") returned 1 [0075.171] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.171] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.171] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.171] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.171] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.171] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.171] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.171] lstrcpynW (in: lpString1=0x432ea0, lpString2="x", iMaxLength=1024 | out: lpString1="x") returned="x" [0075.171] lstrlenW (lpString="x") returned 1 [0075.171] lstrcpynW (in: lpString1=0x40b5f0, lpString2="x", iMaxLength=1024 | out: lpString1="x") returned="x" [0075.171] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.171] lstrcmpiW (lpString1="x", lpString2="^") returned 1 [0075.171] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.171] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.171] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.172] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.172] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.172] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.172] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.172] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.172] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0" [0075.172] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0") returned 41 [0075.172] lstrcpynW (in: lpString1=0x432ef2, lpString2="x", iMaxLength=1024 | out: lpString1="x") returned="x" [0075.172] lstrlenW (lpString="x") returned 1 [0075.172] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x" [0075.172] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x") returned 42 [0075.172] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x" [0075.172] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.172] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.172] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.172] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.173] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.173] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.173] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.173] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.173] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.173] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.173] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.173] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.173] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.173] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.173] lstrlenW (lpString="C:\\Windows") returned 10 [0075.173] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.173] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.174] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.174] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.174] lstrlenW (lpString="524386") returned 6 [0075.174] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.174] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.174] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.174] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.174] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.174] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.174] lstrlenW (lpString="2") returned 1 [0075.174] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.174] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.174] lstrlenW (lpString="4") returned 1 [0075.174] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.174] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.174] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.174] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.174] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.174] lstrlenW (lpString="4") returned 1 [0075.174] lstrcpynW (in: lpString1=0x432ea0, lpString2="30783330", iMaxLength=1024 | out: lpString1="30783330") returned="30783330" [0075.174] lstrlenW (lpString="30783330") returned 8 [0075.174] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30783330", iMaxLength=1024 | out: lpString1="30783330") returned="30783330" [0075.174] lstrlenW (lpString="30783330") returned 8 [0075.174] lstrcpynW (in: lpString1=0x46b000, lpString2="3330", iMaxLength=1024 | out: lpString1="3330") returned="3330" [0075.174] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.174] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.175] lstrlenW (lpString="") returned 0 [0075.175] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.175] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.175] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.175] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.175] lstrcpynW (in: lpString1=0x432ea4, lpString2="33", iMaxLength=1024 | out: lpString1="33") returned="33" [0075.175] lstrlenW (lpString="33") returned 2 [0075.175] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="3") returned 1 [0075.175] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.175] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.175] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.175] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.175] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.175] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.175] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.175] lstrcpynW (in: lpString1=0x432ea0, lpString2="3", iMaxLength=1024 | out: lpString1="3") returned="3" [0075.175] lstrlenW (lpString="3") returned 1 [0075.175] lstrcpynW (in: lpString1=0x40b5f0, lpString2="3", iMaxLength=1024 | out: lpString1="3") returned="3" [0075.175] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.175] lstrcmpiW (lpString1="3", lpString2="^") returned 1 [0075.175] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.175] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.175] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.176] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.176] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.176] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.176] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.176] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.176] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x" [0075.176] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x") returned 42 [0075.176] lstrcpynW (in: lpString1=0x432ef4, lpString2="3", iMaxLength=1024 | out: lpString1="3") returned="3" [0075.176] lstrlenW (lpString="3") returned 1 [0075.176] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3" [0075.176] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3") returned 43 [0075.176] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3" [0075.176] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.176] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.176] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.176] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.176] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.177] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.177] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.177] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.177] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.177] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.177] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.177] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.177] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.177] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.177] lstrlenW (lpString="C:\\Windows") returned 10 [0075.177] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.177] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.177] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.178] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.178] lstrlenW (lpString="524386") returned 6 [0075.178] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.178] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.178] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.178] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.178] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.178] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.178] lstrlenW (lpString="4") returned 1 [0075.178] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.178] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.178] lstrlenW (lpString="6") returned 1 [0075.178] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.178] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.178] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.178] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.178] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.178] lstrlenW (lpString="6") returned 1 [0075.178] lstrcpynW (in: lpString1=0x432ea0, lpString2="30783330", iMaxLength=1024 | out: lpString1="30783330") returned="30783330" [0075.178] lstrlenW (lpString="30783330") returned 8 [0075.178] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30783330", iMaxLength=1024 | out: lpString1="30783330") returned="30783330" [0075.178] lstrlenW (lpString="30783330") returned 8 [0075.178] lstrcpynW (in: lpString1=0x46b000, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.178] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.178] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.178] lstrlenW (lpString="") returned 0 [0075.178] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.179] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.179] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.179] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.179] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.179] lstrlenW (lpString="30") returned 2 [0075.179] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0075.179] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.179] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.179] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.179] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.179] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.179] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.179] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.179] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.179] lstrlenW (lpString="0") returned 1 [0075.179] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.179] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.179] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0075.180] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.180] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.180] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.180] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.180] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.180] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.180] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.180] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.180] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3" [0075.180] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3") returned 43 [0075.180] lstrcpynW (in: lpString1=0x432ef6, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.181] lstrlenW (lpString="0") returned 1 [0075.181] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x30", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x30") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x30" [0075.181] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x30") returned 44 [0075.181] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x30", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x30") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x30" [0075.181] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.181] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.181] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.181] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.181] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.181] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.181] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.181] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.181] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.181] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.181] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.182] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.182] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.182] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.182] lstrlenW (lpString="C:\\Windows") returned 10 [0075.182] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.182] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.182] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.182] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.182] lstrlenW (lpString="524386") returned 6 [0075.182] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.182] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.182] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.182] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.182] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.182] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.182] lstrlenW (lpString="6") returned 1 [0075.182] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.182] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.182] lstrlenW (lpString="8") returned 1 [0075.182] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.183] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.183] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.183] lstrlenW (lpString="Execute: ") returned 9 [0075.183] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.183] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.183] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.183] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x2b [0075.183] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x2b [0075.184] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x2b, lParam=0x0) returned 0x1 [0075.184] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.184] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.184] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.184] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.184] lstrcpynW (in: lpString1=0x432ea0, lpString2="232", iMaxLength=1024 | out: lpString1="232") returned="232" [0075.184] lstrlenW (lpString="232") returned 3 [0075.184] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="240") returned 3 [0075.184] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.184] lstrlenW (lpString="") returned 0 [0075.184] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.184] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.185] lstrcpynW (in: lpString1=0x432ea0, lpString2="240", iMaxLength=1024 | out: lpString1="240") returned="240" [0075.185] lstrlenW (lpString="240") returned 3 [0075.185] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.185] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.185] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned="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" [0075.185] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.185] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.185] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.185] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.185] lstrcpynW (in: lpString1=0x432ea4, lpString2="C5B859BC", iMaxLength=1024 | out: lpString1="C5B859BC") returned="C5B859BC" [0075.185] lstrlenW (lpString="C5B859BC") returned 8 [0075.185] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="808463392") returned 9 [0075.185] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.185] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.185] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.185] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.186] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.186] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.186] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.186] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.186] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.186] lstrcpynW (in: lpString1=0x432ea0, lpString2="808463392", iMaxLength=1024 | out: lpString1="808463392") returned="808463392" [0075.186] lstrlenW (lpString="808463392") returned 9 [0075.186] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="30302C20") returned 8 [0075.186] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.186] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.186] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.187] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.187] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.187] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.187] lstrlenW (lpString="0") returned 1 [0075.187] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.187] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.187] lstrlenW (lpString="0") returned 1 [0075.187] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.187] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.187] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.187] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.187] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.187] lstrlenW (lpString="0") returned 1 [0075.187] lstrcpynW (in: lpString1=0x432ea0, lpString2="30302C20", iMaxLength=1024 | out: lpString1="30302C20") returned="30302C20" [0075.187] lstrlenW (lpString="30302C20") returned 8 [0075.187] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30302C20", iMaxLength=1024 | out: lpString1="30302C20") returned="30302C20" [0075.187] lstrlenW (lpString="30302C20") returned 8 [0075.187] lstrcpynW (in: lpString1=0x46b000, lpString2="30302C20", iMaxLength=1024 | out: lpString1="30302C20") returned="30302C20" [0075.187] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.187] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.188] lstrlenW (lpString="") returned 0 [0075.188] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.188] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.188] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.188] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.188] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.188] lstrlenW (lpString="30") returned 2 [0075.188] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0075.188] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.188] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.188] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.188] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.188] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.188] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.188] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.188] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.188] lstrlenW (lpString="0") returned 1 [0075.188] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.189] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.189] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0075.189] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.189] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.189] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.189] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.189] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.189] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.189] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.189] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.189] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.189] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.190] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.190] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.190] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.190] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.190] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.190] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.190] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.190] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.190] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.190] lstrlenW (lpString="C:\\Windows") returned 10 [0075.190] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.190] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.191] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.191] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.191] lstrlenW (lpString="524386") returned 6 [0075.191] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.191] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.191] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.191] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.191] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.191] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.191] lstrlenW (lpString="0") returned 1 [0075.191] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.191] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.191] lstrlenW (lpString="2") returned 1 [0075.191] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.191] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.191] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.191] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.191] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.191] lstrlenW (lpString="2") returned 1 [0075.191] lstrcpynW (in: lpString1=0x432ea0, lpString2="30302C20", iMaxLength=1024 | out: lpString1="30302C20") returned="30302C20" [0075.191] lstrlenW (lpString="30302C20") returned 8 [0075.191] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30302C20", iMaxLength=1024 | out: lpString1="30302C20") returned="30302C20" [0075.191] lstrlenW (lpString="30302C20") returned 8 [0075.191] lstrcpynW (in: lpString1=0x46b000, lpString2="302C20", iMaxLength=1024 | out: lpString1="302C20") returned="302C20" [0075.192] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.192] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.192] lstrlenW (lpString="") returned 0 [0075.192] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.192] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.192] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.192] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.192] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.192] lstrlenW (lpString="30") returned 2 [0075.192] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0075.192] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.192] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.192] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.192] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.192] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.192] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.192] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.192] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.192] lstrlenW (lpString="0") returned 1 [0075.193] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.193] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.193] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0075.193] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.193] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.193] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.193] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.193] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.193] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.193] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.193] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.193] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x300", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x300") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x300" [0075.193] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x300") returned 45 [0075.193] lstrcpynW (in: lpString1=0x432efa, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.193] lstrlenW (lpString="0") returned 1 [0075.193] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000" [0075.193] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000") returned 46 [0075.193] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000" [0075.194] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.194] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.194] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.194] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.194] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.194] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.194] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.194] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.194] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.194] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.194] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.194] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.194] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.195] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.195] lstrlenW (lpString="C:\\Windows") returned 10 [0075.195] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.195] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.195] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.195] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.195] lstrlenW (lpString="524386") returned 6 [0075.195] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.195] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.195] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.195] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.195] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.195] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.195] lstrlenW (lpString="2") returned 1 [0075.195] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.195] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.195] lstrlenW (lpString="4") returned 1 [0075.195] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.195] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.195] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.195] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.196] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.196] lstrlenW (lpString="4") returned 1 [0075.196] lstrcpynW (in: lpString1=0x432ea0, lpString2="30302C20", iMaxLength=1024 | out: lpString1="30302C20") returned="30302C20" [0075.196] lstrlenW (lpString="30302C20") returned 8 [0075.196] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30302C20", iMaxLength=1024 | out: lpString1="30302C20") returned="30302C20" [0075.196] lstrlenW (lpString="30302C20") returned 8 [0075.196] lstrcpynW (in: lpString1=0x46b000, lpString2="2C20", iMaxLength=1024 | out: lpString1="2C20") returned="2C20" [0075.196] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.196] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.196] lstrlenW (lpString="") returned 0 [0075.196] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.196] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.196] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.196] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.197] lstrcpynW (in: lpString1=0x432ea4, lpString2="2C", iMaxLength=1024 | out: lpString1="2C") returned="2C" [0075.197] lstrlenW (lpString="2C") returned 2 [0075.197] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=",") returned 1 [0075.197] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.197] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.197] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.197] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.197] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.197] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.197] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.197] lstrcpynW (in: lpString1=0x432ea0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0075.197] lstrlenW (lpString=",") returned 1 [0075.197] lstrcpynW (in: lpString1=0x40b5f0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0075.197] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.197] lstrcmpiW (lpString1=",", lpString2="^") returned -1 [0075.197] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.197] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.197] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.197] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.198] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.198] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.198] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.198] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.198] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000" [0075.198] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000") returned 46 [0075.198] lstrcpynW (in: lpString1=0x432efc, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0075.198] lstrlenW (lpString=",") returned 1 [0075.198] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000,", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000,") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000," [0075.198] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000,") returned 47 [0075.198] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000,", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000,") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000," [0075.198] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.198] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.198] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.198] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.198] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.198] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.199] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.199] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.199] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.199] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.199] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.199] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.199] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.199] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.199] lstrlenW (lpString="C:\\Windows") returned 10 [0075.199] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.199] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.200] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.200] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.200] lstrlenW (lpString="524386") returned 6 [0075.200] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.200] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.200] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.200] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.200] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.200] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.200] lstrlenW (lpString="4") returned 1 [0075.200] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.200] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.200] lstrlenW (lpString="6") returned 1 [0075.200] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.200] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.200] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.200] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.200] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.200] lstrlenW (lpString="6") returned 1 [0075.201] lstrcpynW (in: lpString1=0x432ea0, lpString2="30302C20", iMaxLength=1024 | out: lpString1="30302C20") returned="30302C20" [0075.201] lstrlenW (lpString="30302C20") returned 8 [0075.201] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30302C20", iMaxLength=1024 | out: lpString1="30302C20") returned="30302C20" [0075.201] lstrlenW (lpString="30302C20") returned 8 [0075.201] lstrcpynW (in: lpString1=0x46b000, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0075.201] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.201] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.201] lstrlenW (lpString="") returned 0 [0075.201] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.201] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.201] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.201] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.201] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0075.201] lstrlenW (lpString="20") returned 2 [0075.201] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0075.201] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.201] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.201] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.201] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.202] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.202] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.202] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.202] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.202] lstrlenW (lpString=" ") returned 1 [0075.202] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.202] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.202] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0075.202] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.202] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.202] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.202] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.202] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.202] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.202] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.202] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.202] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000,", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000,") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000," [0075.202] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000,") returned 47 [0075.203] lstrcpynW (in: lpString1=0x432efe, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.203] lstrlenW (lpString=" ") returned 1 [0075.203] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, ", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, ") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, " [0075.203] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, ") returned 48 [0075.203] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, ", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, ") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, " [0075.203] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.203] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.203] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.203] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.203] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.203] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.203] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.203] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.203] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.203] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.203] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.204] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.204] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.204] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.204] lstrlenW (lpString="C:\\Windows") returned 10 [0075.204] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.204] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.204] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.204] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.204] lstrlenW (lpString="524386") returned 6 [0075.204] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.204] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.204] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.204] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.204] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.204] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.204] lstrlenW (lpString="6") returned 1 [0075.204] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.204] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.204] lstrlenW (lpString="8") returned 1 [0075.204] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.205] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.205] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.205] lstrlenW (lpString="Execute: ") returned 9 [0075.205] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.205] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.205] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.205] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x2c [0075.205] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x2c [0075.205] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x2c, lParam=0x0) returned 0x1 [0075.206] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.206] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.206] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.206] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.206] lstrcpynW (in: lpString1=0x432ea0, lpString2="240", iMaxLength=1024 | out: lpString1="240") returned="240" [0075.206] lstrlenW (lpString="240") returned 3 [0075.206] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="248") returned 3 [0075.206] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.206] lstrlenW (lpString="") returned 0 [0075.206] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.206] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.206] lstrcpynW (in: lpString1=0x432ea0, lpString2="248", iMaxLength=1024 | out: lpString1="248") returned="248" [0075.206] lstrlenW (lpString="248") returned 3 [0075.206] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0075.206] lstrlenW (lpString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returned 1023 [0075.207] lstrcpynW (in: lpString1=0x40a5f0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.207] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned="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" [0075.207] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.207] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.207] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.207] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.207] lstrcpynW (in: lpString1=0x432ea4, lpString2="9CA845E4", iMaxLength=1024 | out: lpString1="9CA845E4") returned="9CA845E4" [0075.207] lstrlenW (lpString="9CA845E4") returned 8 [0075.207] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1763717240") returned 10 [0075.207] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.207] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.207] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.207] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.207] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.207] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.207] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.208] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.208] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.208] lstrcpynW (in: lpString1=0x432ea0, lpString2="1763717240", iMaxLength=1024 | out: lpString1="1763717240") returned="1763717240" [0075.208] lstrlenW (lpString="1763717240") returned 10 [0075.208] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="69203078") returned 8 [0075.208] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.208] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.208] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.208] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.208] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.208] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.208] lstrlenW (lpString="0") returned 1 [0075.208] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.208] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.208] lstrlenW (lpString="0") returned 1 [0075.208] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.208] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.208] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.208] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.209] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.209] lstrlenW (lpString="0") returned 1 [0075.209] lstrcpynW (in: lpString1=0x432ea0, lpString2="69203078", iMaxLength=1024 | out: lpString1="69203078") returned="69203078" [0075.209] lstrlenW (lpString="69203078") returned 8 [0075.209] lstrcpynW (in: lpString1=0x40a5f0, lpString2="69203078", iMaxLength=1024 | out: lpString1="69203078") returned="69203078" [0075.209] lstrlenW (lpString="69203078") returned 8 [0075.209] lstrcpynW (in: lpString1=0x46b000, lpString2="69203078", iMaxLength=1024 | out: lpString1="69203078") returned="69203078" [0075.209] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.209] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.209] lstrlenW (lpString="") returned 0 [0075.209] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.209] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.209] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.209] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.209] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0075.209] lstrlenW (lpString="69") returned 2 [0075.209] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0075.209] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.209] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.209] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.209] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.209] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.209] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.210] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.210] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.210] lstrlenW (lpString="i") returned 1 [0075.210] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.210] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.210] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0075.210] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.210] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.210] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.210] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.210] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.210] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.210] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.210] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.210] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, ", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, ") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, " [0075.210] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, ") returned 48 [0075.211] lstrcpynW (in: lpString1=0x432f00, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.211] lstrlenW (lpString="i") returned 1 [0075.211] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i" [0075.211] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i") returned 49 [0075.211] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i" [0075.211] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.211] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.211] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.211] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.211] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.211] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.211] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.211] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.211] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.212] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.212] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.212] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.212] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.212] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.212] lstrlenW (lpString="C:\\Windows") returned 10 [0075.212] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.212] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.212] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.212] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.212] lstrlenW (lpString="524386") returned 6 [0075.212] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.212] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.212] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.212] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.213] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.213] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.213] lstrlenW (lpString="0") returned 1 [0075.213] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.213] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.213] lstrlenW (lpString="2") returned 1 [0075.213] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.213] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.213] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.213] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.213] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.213] lstrlenW (lpString="2") returned 1 [0075.213] lstrcpynW (in: lpString1=0x432ea0, lpString2="69203078", iMaxLength=1024 | out: lpString1="69203078") returned="69203078" [0075.213] lstrlenW (lpString="69203078") returned 8 [0075.213] lstrcpynW (in: lpString1=0x40a5f0, lpString2="69203078", iMaxLength=1024 | out: lpString1="69203078") returned="69203078" [0075.213] lstrlenW (lpString="69203078") returned 8 [0075.213] lstrcpynW (in: lpString1=0x46b000, lpString2="203078", iMaxLength=1024 | out: lpString1="203078") returned="203078" [0075.213] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.213] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.213] lstrlenW (lpString="") returned 0 [0075.213] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.213] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.213] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.213] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.213] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0075.213] lstrlenW (lpString="20") returned 2 [0075.213] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0075.213] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.214] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.214] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.214] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.214] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.214] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.214] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.214] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.214] lstrlenW (lpString=" ") returned 1 [0075.214] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.214] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.214] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0075.214] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.214] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.214] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.214] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.214] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.214] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.215] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.215] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.215] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i" [0075.215] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i") returned 49 [0075.215] lstrcpynW (in: lpString1=0x432f02, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.215] lstrlenW (lpString=" ") returned 1 [0075.215] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i ", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i ") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i " [0075.215] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i ") returned 50 [0075.215] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i ", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i ") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i " [0075.215] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.215] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.215] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.215] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.215] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.215] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.215] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.215] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.216] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.216] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.216] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.216] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.216] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.216] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.216] lstrlenW (lpString="C:\\Windows") returned 10 [0075.216] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.216] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.216] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.216] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.216] lstrlenW (lpString="524386") returned 6 [0075.216] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.216] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.216] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.217] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.217] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.217] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.217] lstrlenW (lpString="2") returned 1 [0075.217] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.217] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.217] lstrlenW (lpString="4") returned 1 [0075.217] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.217] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.217] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.217] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.217] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.217] lstrlenW (lpString="4") returned 1 [0075.217] lstrcpynW (in: lpString1=0x432ea0, lpString2="69203078", iMaxLength=1024 | out: lpString1="69203078") returned="69203078" [0075.217] lstrlenW (lpString="69203078") returned 8 [0075.217] lstrcpynW (in: lpString1=0x40a5f0, lpString2="69203078", iMaxLength=1024 | out: lpString1="69203078") returned="69203078" [0075.217] lstrlenW (lpString="69203078") returned 8 [0075.217] lstrcpynW (in: lpString1=0x46b000, lpString2="3078", iMaxLength=1024 | out: lpString1="3078") returned="3078" [0075.217] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.217] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.217] lstrlenW (lpString="") returned 0 [0075.217] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.217] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.217] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.217] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.217] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.217] lstrlenW (lpString="30") returned 2 [0075.217] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0075.217] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.218] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.218] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.218] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.218] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.218] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.218] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.218] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.218] lstrlenW (lpString="0") returned 1 [0075.218] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.218] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.218] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0075.218] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.218] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.218] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.218] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.218] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.218] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.219] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.219] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.219] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i ", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i ") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i " [0075.219] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i ") returned 50 [0075.219] lstrcpynW (in: lpString1=0x432f04, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.219] lstrlenW (lpString="0") returned 1 [0075.219] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0" [0075.220] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0") returned 51 [0075.220] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0" [0075.220] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.220] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.220] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.220] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.220] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.220] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.220] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.220] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.220] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.220] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.220] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.221] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.221] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.221] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.221] lstrlenW (lpString="C:\\Windows") returned 10 [0075.221] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.221] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.221] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.221] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.221] lstrlenW (lpString="524386") returned 6 [0075.221] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.221] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.221] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.221] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.221] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.221] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.221] lstrlenW (lpString="4") returned 1 [0075.221] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.221] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.222] lstrlenW (lpString="6") returned 1 [0075.222] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.222] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.222] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.222] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.222] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.222] lstrlenW (lpString="6") returned 1 [0075.222] lstrcpynW (in: lpString1=0x432ea0, lpString2="69203078", iMaxLength=1024 | out: lpString1="69203078") returned="69203078" [0075.222] lstrlenW (lpString="69203078") returned 8 [0075.222] lstrcpynW (in: lpString1=0x40a5f0, lpString2="69203078", iMaxLength=1024 | out: lpString1="69203078") returned="69203078" [0075.222] lstrlenW (lpString="69203078") returned 8 [0075.222] lstrcpynW (in: lpString1=0x46b000, lpString2="78", iMaxLength=1024 | out: lpString1="78") returned="78" [0075.222] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.222] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.222] lstrlenW (lpString="") returned 0 [0075.222] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.222] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.222] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.222] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.222] lstrcpynW (in: lpString1=0x432ea4, lpString2="78", iMaxLength=1024 | out: lpString1="78") returned="78" [0075.222] lstrlenW (lpString="78") returned 2 [0075.222] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="x") returned 1 [0075.222] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.222] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.222] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.222] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.223] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.223] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.223] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.223] lstrcpynW (in: lpString1=0x432ea0, lpString2="x", iMaxLength=1024 | out: lpString1="x") returned="x" [0075.223] lstrlenW (lpString="x") returned 1 [0075.223] lstrcpynW (in: lpString1=0x40b5f0, lpString2="x", iMaxLength=1024 | out: lpString1="x") returned="x" [0075.223] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.223] lstrcmpiW (lpString1="x", lpString2="^") returned 1 [0075.223] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.223] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.223] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.223] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.223] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.223] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.223] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.224] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.224] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0" [0075.224] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0") returned 51 [0075.224] lstrcpynW (in: lpString1=0x432f06, lpString2="x", iMaxLength=1024 | out: lpString1="x") returned="x" [0075.224] lstrlenW (lpString="x") returned 1 [0075.224] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x" [0075.224] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x") returned 52 [0075.224] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x" [0075.224] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.224] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.224] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.224] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.224] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.224] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.224] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.224] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.224] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.225] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.225] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.225] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.225] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.225] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.225] lstrlenW (lpString="C:\\Windows") returned 10 [0075.225] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.225] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.225] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.225] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.225] lstrlenW (lpString="524386") returned 6 [0075.225] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.225] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.225] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.225] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.225] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.225] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.226] lstrlenW (lpString="6") returned 1 [0075.226] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.226] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.226] lstrlenW (lpString="8") returned 1 [0075.226] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.226] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.226] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.226] lstrlenW (lpString="Execute: ") returned 9 [0075.226] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.226] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.226] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.226] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x2d [0075.226] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x2d [0075.227] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x2d, lParam=0x0) returned 0x1 [0075.227] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.229] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.229] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.229] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.229] lstrcpynW (in: lpString1=0x432ea0, lpString2="248", iMaxLength=1024 | out: lpString1="248") returned="248" [0075.229] lstrlenW (lpString="248") returned 3 [0075.229] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="256") returned 3 [0075.229] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.229] lstrlenW (lpString="") returned 0 [0075.229] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.229] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.229] lstrcpynW (in: lpString1=0x432ea0, lpString2="256", iMaxLength=1024 | out: lpString1="256") returned="256" [0075.229] lstrlenW (lpString="256") returned 3 [0075.229] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.229] lstrcpynW (in: lpString1=0x40a5f0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.229] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.229] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.229] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.229] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.230] lstrcpynW (in: lpString1=0x432ea4, lpString2="C1B85CEC", iMaxLength=1024 | out: lpString1="C1B85CEC") returned="C1B85CEC" [0075.230] lstrlenW (lpString="C1B85CEC") returned 8 [0075.230] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="875571568") returned 9 [0075.230] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.230] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.230] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.230] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.230] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.230] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.230] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.230] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.230] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.230] lstrcpynW (in: lpString1=0x432ea0, lpString2="875571568", iMaxLength=1024 | out: lpString1="875571568") returned="875571568" [0075.230] lstrlenW (lpString="875571568") returned 9 [0075.230] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="34302970") returned 8 [0075.230] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.230] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.231] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.231] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.231] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.231] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.231] lstrlenW (lpString="0") returned 1 [0075.231] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.231] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.231] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.231] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.231] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.231] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="4") returned 1 [0075.231] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.231] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.231] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.231] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.231] lstrcmpiW (lpString1="4", lpString2="^") returned 1 [0075.231] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.232] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.232] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.232] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.232] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.232] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.232] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.232] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.232] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x" [0075.232] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x") returned 52 [0075.232] lstrcpynW (in: lpString1=0x432f08, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.232] lstrlenW (lpString="4") returned 1 [0075.233] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x4", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x4") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x4" [0075.233] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x4") returned 53 [0075.233] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x4", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x4") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x4" [0075.233] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.233] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.233] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.233] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.233] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.233] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.233] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.233] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.233] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.233] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.233] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.233] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.233] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.234] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.234] lstrlenW (lpString="C:\\Windows") returned 10 [0075.234] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.234] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.234] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.234] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.234] lstrlenW (lpString="524386") returned 6 [0075.234] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.234] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.234] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.234] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.234] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.234] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.234] lstrlenW (lpString="0") returned 1 [0075.234] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.234] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.234] lstrlenW (lpString="2") returned 1 [0075.234] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.234] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.234] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.234] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.235] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.235] lstrlenW (lpString="2") returned 1 [0075.235] lstrcpynW (in: lpString1=0x432ea0, lpString2="34302970", iMaxLength=1024 | out: lpString1="34302970") returned="34302970" [0075.235] lstrlenW (lpString="34302970") returned 8 [0075.235] lstrcpynW (in: lpString1=0x40a5f0, lpString2="34302970", iMaxLength=1024 | out: lpString1="34302970") returned="34302970" [0075.235] lstrlenW (lpString="34302970") returned 8 [0075.235] lstrcpynW (in: lpString1=0x46b000, lpString2="302970", iMaxLength=1024 | out: lpString1="302970") returned="302970" [0075.235] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.235] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.235] lstrlenW (lpString="") returned 0 [0075.235] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.235] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.235] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.235] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.235] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.235] lstrlenW (lpString="30") returned 2 [0075.235] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0075.235] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.235] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.235] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.235] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.235] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.235] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.235] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.235] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.236] lstrlenW (lpString="0") returned 1 [0075.236] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.236] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.236] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0075.236] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.236] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.236] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.236] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.236] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.236] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.236] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.236] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.236] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x4", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x4") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x4" [0075.236] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x4") returned 53 [0075.236] lstrcpynW (in: lpString1=0x432f0a, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.236] lstrlenW (lpString="0") returned 1 [0075.236] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40" [0075.236] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40") returned 54 [0075.236] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40" [0075.236] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.237] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.237] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.237] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.237] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.237] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.237] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.237] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.237] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.237] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.237] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.237] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.237] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.238] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.238] lstrlenW (lpString="C:\\Windows") returned 10 [0075.238] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.238] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.238] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.238] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.238] lstrlenW (lpString="524386") returned 6 [0075.238] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.238] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.238] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.238] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.238] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.238] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.238] lstrlenW (lpString="2") returned 1 [0075.238] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.238] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.238] lstrlenW (lpString="4") returned 1 [0075.238] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.238] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.238] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.238] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.238] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.238] lstrlenW (lpString="4") returned 1 [0075.238] lstrcpynW (in: lpString1=0x432ea0, lpString2="34302970", iMaxLength=1024 | out: lpString1="34302970") returned="34302970" [0075.239] lstrlenW (lpString="34302970") returned 8 [0075.239] lstrcpynW (in: lpString1=0x40a5f0, lpString2="34302970", iMaxLength=1024 | out: lpString1="34302970") returned="34302970" [0075.239] lstrlenW (lpString="34302970") returned 8 [0075.239] lstrcpynW (in: lpString1=0x46b000, lpString2="2970", iMaxLength=1024 | out: lpString1="2970") returned="2970" [0075.239] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.239] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.239] lstrlenW (lpString="") returned 0 [0075.239] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.239] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.239] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.239] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.239] lstrcpynW (in: lpString1=0x432ea4, lpString2="29", iMaxLength=1024 | out: lpString1="29") returned="29" [0075.239] lstrlenW (lpString="29") returned 2 [0075.239] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=")") returned 1 [0075.239] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.239] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.239] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.239] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.239] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.239] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.239] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.239] lstrcpynW (in: lpString1=0x432ea0, lpString2=")", iMaxLength=1024 | out: lpString1=")") returned=")" [0075.239] lstrlenW (lpString=")") returned 1 [0075.239] lstrcpynW (in: lpString1=0x40b5f0, lpString2=")", iMaxLength=1024 | out: lpString1=")") returned=")" [0075.239] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.240] lstrcmpiW (lpString1=")", lpString2="^") returned -1 [0075.240] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.240] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.240] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.240] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.240] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.240] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.240] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.240] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.240] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40" [0075.240] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40") returned 54 [0075.240] lstrcpynW (in: lpString1=0x432f0c, lpString2=")", iMaxLength=1024 | out: lpString1=")") returned=")" [0075.240] lstrlenW (lpString=")") returned 1 [0075.240] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)" [0075.240] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)") returned 55 [0075.240] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)" [0075.240] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.241] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.241] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.241] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.241] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.241] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.241] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.241] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.241] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.241] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.241] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.241] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.241] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.242] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.242] lstrlenW (lpString="C:\\Windows") returned 10 [0075.242] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.242] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.242] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.242] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.242] lstrlenW (lpString="524386") returned 6 [0075.242] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.242] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.242] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.242] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.242] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.242] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.242] lstrlenW (lpString="4") returned 1 [0075.242] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.242] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.242] lstrlenW (lpString="6") returned 1 [0075.242] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.242] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.242] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.242] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.242] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.242] lstrlenW (lpString="6") returned 1 [0075.243] lstrcpynW (in: lpString1=0x432ea0, lpString2="34302970", iMaxLength=1024 | out: lpString1="34302970") returned="34302970" [0075.243] lstrlenW (lpString="34302970") returned 8 [0075.243] lstrcpynW (in: lpString1=0x40a5f0, lpString2="34302970", iMaxLength=1024 | out: lpString1="34302970") returned="34302970" [0075.243] lstrlenW (lpString="34302970") returned 8 [0075.243] lstrcpynW (in: lpString1=0x46b000, lpString2="70", iMaxLength=1024 | out: lpString1="70") returned="70" [0075.243] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.243] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.243] lstrlenW (lpString="") returned 0 [0075.243] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.243] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.243] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.243] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.243] lstrcpynW (in: lpString1=0x432ea4, lpString2="70", iMaxLength=1024 | out: lpString1="70") returned="70" [0075.243] lstrlenW (lpString="70") returned 2 [0075.243] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="p") returned 1 [0075.243] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.243] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.243] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.243] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.243] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.243] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.243] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.243] lstrcpynW (in: lpString1=0x432ea0, lpString2="p", iMaxLength=1024 | out: lpString1="p") returned="p" [0075.243] lstrlenW (lpString="p") returned 1 [0075.243] lstrcpynW (in: lpString1=0x40b5f0, lpString2="p", iMaxLength=1024 | out: lpString1="p") returned="p" [0075.244] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.244] lstrcmpiW (lpString1="p", lpString2="^") returned 1 [0075.244] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.244] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.244] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.244] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.244] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.244] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.244] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.244] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.244] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)" [0075.244] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)") returned 55 [0075.244] lstrcpynW (in: lpString1=0x432f0e, lpString2="p", iMaxLength=1024 | out: lpString1="p") returned="p" [0075.244] lstrlenW (lpString="p") returned 1 [0075.244] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p" [0075.244] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p") returned 56 [0075.244] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p" [0075.244] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.245] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.245] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.245] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.245] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.245] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.245] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.245] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.245] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.245] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.245] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.245] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.245] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.246] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.246] lstrlenW (lpString="C:\\Windows") returned 10 [0075.246] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.246] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.246] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.246] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.246] lstrlenW (lpString="524386") returned 6 [0075.246] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.246] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.246] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.246] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.246] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.246] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.246] lstrlenW (lpString="6") returned 1 [0075.246] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.246] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.246] lstrlenW (lpString="8") returned 1 [0075.246] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.246] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.246] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.246] lstrlenW (lpString="Execute: ") returned 9 [0075.246] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.246] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.246] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.247] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x2e [0075.247] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x2e [0075.247] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x2e, lParam=0x0) returned 0x1 [0075.248] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.248] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.248] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.248] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.248] lstrcpynW (in: lpString1=0x432ea0, lpString2="256", iMaxLength=1024 | out: lpString1="256") returned="256" [0075.248] lstrlenW (lpString="256") returned 3 [0075.248] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="264") returned 3 [0075.248] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.248] lstrlenW (lpString="") returned 0 [0075.248] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.248] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.248] lstrcpynW (in: lpString1=0x432ea0, lpString2="264", iMaxLength=1024 | out: lpString1="264") returned="264" [0075.248] lstrlenW (lpString="264") returned 3 [0075.248] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.248] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0075.248] lstrlenW (lpString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returned 1023 [0075.248] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.248] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.248] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.249] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.249] lstrcpynW (in: lpString1=0x432ea4, lpString2="DBFA44C2", iMaxLength=1024 | out: lpString1="DBFA44C2") returned="DBFA44C2" [0075.249] lstrlenW (lpString="DBFA44C2") returned 8 [0075.249] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="779235678") returned 9 [0075.249] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.249] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.249] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.249] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.249] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.249] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.249] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.249] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.249] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.249] lstrcpynW (in: lpString1=0x432ea0, lpString2="779235678", iMaxLength=1024 | out: lpString1="779235678") returned="779235678" [0075.249] lstrlenW (lpString="779235678") returned 9 [0075.249] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="2E72315E") returned 8 [0075.249] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.250] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.250] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.250] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.250] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.250] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.250] lstrlenW (lpString="0") returned 1 [0075.250] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.250] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.250] lstrlenW (lpString="0") returned 1 [0075.250] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.250] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.250] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.250] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.250] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.250] lstrlenW (lpString="0") returned 1 [0075.250] lstrcpynW (in: lpString1=0x432ea0, lpString2="2E72315E", iMaxLength=1024 | out: lpString1="2E72315E") returned="2E72315E" [0075.250] lstrlenW (lpString="2E72315E") returned 8 [0075.250] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2E72315E", iMaxLength=1024 | out: lpString1="2E72315E") returned="2E72315E" [0075.250] lstrlenW (lpString="2E72315E") returned 8 [0075.250] lstrcpynW (in: lpString1=0x46b000, lpString2="2E72315E", iMaxLength=1024 | out: lpString1="2E72315E") returned="2E72315E" [0075.250] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.250] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.250] lstrlenW (lpString="") returned 0 [0075.250] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.250] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.251] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.251] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.251] lstrcpynW (in: lpString1=0x432ea4, lpString2="2E", iMaxLength=1024 | out: lpString1="2E") returned="2E" [0075.251] lstrlenW (lpString="2E") returned 2 [0075.251] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=".") returned 1 [0075.251] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.251] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.251] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.251] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.251] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.251] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.251] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.251] lstrcpynW (in: lpString1=0x432ea0, lpString2=".", iMaxLength=1024 | out: lpString1=".") returned="." [0075.251] lstrlenW (lpString=".") returned 1 [0075.251] lstrcpynW (in: lpString1=0x40b5f0, lpString2=".", iMaxLength=1024 | out: lpString1=".") returned="." [0075.251] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.251] lstrcmpiW (lpString1=".", lpString2="^") returned -1 [0075.251] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.251] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.251] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.251] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.252] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.252] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.252] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.252] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.252] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p" [0075.252] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p") returned 56 [0075.252] lstrcpynW (in: lpString1=0x432f10, lpString2=".", iMaxLength=1024 | out: lpString1=".") returned="." [0075.252] lstrlenW (lpString=".") returned 1 [0075.252] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p." [0075.252] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.") returned 57 [0075.252] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p." [0075.252] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.252] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.252] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.252] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.252] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.252] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.253] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.253] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.253] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.253] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.253] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.253] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.253] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.253] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.253] lstrlenW (lpString="C:\\Windows") returned 10 [0075.253] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.253] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.253] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.254] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.254] lstrlenW (lpString="524386") returned 6 [0075.254] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.254] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.254] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.254] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.254] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.254] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.254] lstrlenW (lpString="0") returned 1 [0075.254] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.254] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.254] lstrlenW (lpString="2") returned 1 [0075.254] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.254] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.254] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.254] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.254] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.254] lstrlenW (lpString="2") returned 1 [0075.254] lstrcpynW (in: lpString1=0x432ea0, lpString2="2E72315E", iMaxLength=1024 | out: lpString1="2E72315E") returned="2E72315E" [0075.254] lstrlenW (lpString="2E72315E") returned 8 [0075.254] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2E72315E", iMaxLength=1024 | out: lpString1="2E72315E") returned="2E72315E" [0075.254] lstrlenW (lpString="2E72315E") returned 8 [0075.255] lstrcpynW (in: lpString1=0x46b000, lpString2="72315E", iMaxLength=1024 | out: lpString1="72315E") returned="72315E" [0075.255] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.255] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.255] lstrlenW (lpString="") returned 0 [0075.255] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.255] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.255] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.255] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.255] lstrcpynW (in: lpString1=0x432ea4, lpString2="72", iMaxLength=1024 | out: lpString1="72") returned="72" [0075.255] lstrlenW (lpString="72") returned 2 [0075.255] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="r") returned 1 [0075.255] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.255] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.255] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.255] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.255] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.255] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.255] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.256] lstrcpynW (in: lpString1=0x432ea0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0075.256] lstrlenW (lpString="r") returned 1 [0075.256] lstrcpynW (in: lpString1=0x40b5f0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0075.256] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.256] lstrcmpiW (lpString1="r", lpString2="^") returned 1 [0075.256] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.256] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.256] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.256] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.256] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.256] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.256] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.256] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.256] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p." [0075.256] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.") returned 57 [0075.257] lstrcpynW (in: lpString1=0x432f12, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0075.257] lstrlenW (lpString="r") returned 1 [0075.257] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.r", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.r") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.r" [0075.257] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.r") returned 58 [0075.257] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.r", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.r") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.r" [0075.257] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.257] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.257] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.257] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.257] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.257] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.257] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.257] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.257] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.257] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.258] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.258] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.258] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.258] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.258] lstrlenW (lpString="C:\\Windows") returned 10 [0075.258] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.258] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.258] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.258] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.259] lstrlenW (lpString="524386") returned 6 [0075.259] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.259] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.259] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.259] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.259] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.259] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.259] lstrlenW (lpString="2") returned 1 [0075.259] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.259] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.259] lstrlenW (lpString="4") returned 1 [0075.259] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.259] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.259] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.259] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.259] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.259] lstrlenW (lpString="4") returned 1 [0075.259] lstrcpynW (in: lpString1=0x432ea0, lpString2="2E72315E", iMaxLength=1024 | out: lpString1="2E72315E") returned="2E72315E" [0075.259] lstrlenW (lpString="2E72315E") returned 8 [0075.259] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2E72315E", iMaxLength=1024 | out: lpString1="2E72315E") returned="2E72315E" [0075.259] lstrlenW (lpString="2E72315E") returned 8 [0075.259] lstrcpynW (in: lpString1=0x46b000, lpString2="315E", iMaxLength=1024 | out: lpString1="315E") returned="315E" [0075.259] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.259] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.259] lstrlenW (lpString="") returned 0 [0075.259] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.259] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.260] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.260] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.260] lstrcpynW (in: lpString1=0x432ea4, lpString2="31", iMaxLength=1024 | out: lpString1="31") returned="31" [0075.260] lstrlenW (lpString="31") returned 2 [0075.260] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="1") returned 1 [0075.260] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.260] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.260] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.260] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.260] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.260] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.260] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.260] lstrcpynW (in: lpString1=0x432ea0, lpString2="1", iMaxLength=1024 | out: lpString1="1") returned="1" [0075.260] lstrlenW (lpString="1") returned 1 [0075.260] lstrcpynW (in: lpString1=0x40b5f0, lpString2="1", iMaxLength=1024 | out: lpString1="1") returned="1" [0075.260] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.260] lstrcmpiW (lpString1="1", lpString2="^") returned 1 [0075.260] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.260] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.260] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.261] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.261] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.261] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.261] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.261] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.261] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.r", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.r") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.r" [0075.261] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.r") returned 58 [0075.261] lstrcpynW (in: lpString1=0x432f14, lpString2="1", iMaxLength=1024 | out: lpString1="1") returned="1" [0075.261] lstrlenW (lpString="1") returned 1 [0075.261] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.r1", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.r1") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.r1" [0075.261] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.r1") returned 59 [0075.261] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.r1", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.r1") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.r1" [0075.261] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.261] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.261] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.261] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.261] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.261] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.262] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.262] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.262] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.262] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.262] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.262] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.262] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.262] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.262] lstrlenW (lpString="C:\\Windows") returned 10 [0075.262] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.262] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.262] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.262] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.262] lstrlenW (lpString="524386") returned 6 [0075.263] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.263] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.263] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.263] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.263] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.263] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.263] lstrlenW (lpString="4") returned 1 [0075.263] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.263] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.263] lstrlenW (lpString="6") returned 1 [0075.263] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.263] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.263] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.263] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.263] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.263] lstrlenW (lpString="6") returned 1 [0075.263] lstrcpynW (in: lpString1=0x432ea0, lpString2="2E72315E", iMaxLength=1024 | out: lpString1="2E72315E") returned="2E72315E" [0075.263] lstrlenW (lpString="2E72315E") returned 8 [0075.263] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2E72315E", iMaxLength=1024 | out: lpString1="2E72315E") returned="2E72315E" [0075.263] lstrlenW (lpString="2E72315E") returned 8 [0075.263] lstrcpynW (in: lpString1=0x46b000, lpString2="5E", iMaxLength=1024 | out: lpString1="5E") returned="5E" [0075.263] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.263] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.263] lstrlenW (lpString="") returned 0 [0075.263] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.263] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.263] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.263] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.263] lstrcpynW (in: lpString1=0x432ea4, lpString2="5E", iMaxLength=1024 | out: lpString1="5E") returned="5E" [0075.263] lstrlenW (lpString="5E") returned 2 [0075.263] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="^") returned 1 [0075.264] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.264] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.264] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.264] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.264] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.264] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.264] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.264] lstrcpynW (in: lpString1=0x432ea0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.264] lstrlenW (lpString="^") returned 1 [0075.264] lstrcpynW (in: lpString1=0x40b5f0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.264] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.264] lstrcmpiW (lpString1="^", lpString2="^") returned 0 [0075.264] lstrcpynW (in: lpString1=0x432ea0, lpString2="264", iMaxLength=1024 | out: lpString1="264") returned="264" [0075.264] lstrlenW (lpString="264") returned 3 [0075.264] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.264] lstrlenW (lpString="6") returned 1 [0075.264] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="270") returned 3 [0075.264] lstrcpynW (in: lpString1=0x432ea0, lpString2="270", iMaxLength=1024 | out: lpString1="270") returned="270" [0075.264] lstrlenW (lpString="270") returned 3 [0075.264] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="272") returned 3 [0075.264] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0075.264] lstrcpynW (in: lpString1=0x40b5f0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0075.264] lstrcpynW (in: lpString1=0x40bdf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.265] lstrcmpiW (lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", lpString2="") returned 1 [0075.265] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0075.265] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" [0075.265] lstrcpynW (in: lpString1=0x40a5f0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" [0075.265] CreateFileW (lpFileName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\nszc5ad.tmp\\system.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0xffffffff [0075.265] lstrcpynW (in: lpString1=0x42c248, lpString2="Skipped: ", iMaxLength=1024 | out: lpString1="Skipped: ") returned="Skipped: " [0075.265] lstrlenW (lpString="Skipped: ") returned 9 [0075.265] lstrlenW (lpString="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned 59 [0075.265] lstrcatW (in: lpString1="Skipped: ", lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" | out: lpString1="Skipped: C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned="Skipped: C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" [0075.265] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.r1", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.r1") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.r1" [0075.265] lstrlenW (lpString="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.r1") returned 59 [0075.265] lstrcpynW (in: lpString1=0x33d454, lpString2="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.r1", iMaxLength=1024 | out: lpString1="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.r1") returned="KERNEL32::VirtualAlloc(i0,i 0x100000, i 0x3000, i 0x40)p.r1" [0075.266] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0075.266] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" [0075.266] lstrcpynW (in: lpString1=0x40a5f0, lpString2="Call", iMaxLength=1024 | out: lpString1="Call") returned="Call" [0075.266] GetModuleHandleW (lpModuleName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned 0x74ad0000 [0075.266] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Call", cchWideChar=-1, lpMultiByteStr=0x2dff86c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Call", lpUsedDefaultChar=0x0) returned 5 [0075.266] GetProcAddress (hModule=0x74ad0000, lpProcName="Call") returned 0x74ad1817 [0075.266] lstrcpyW (in: lpString1=0x33e468, lpString2="KERNEL32" | out: lpString1="KERNEL32") returned="KERNEL32" [0075.266] lstrcpyW (in: lpString1=0x33ec78, lpString2="KERNEL32" | out: lpString1="KERNEL32") returned="KERNEL32" [0075.266] lstrcpyW (in: lpString1=0x33f478, lpString2="VirtualAlloc" | out: lpString1="VirtualAlloc") returned="VirtualAlloc" [0075.268] GetModuleHandleW (lpModuleName="KERNEL32") returned 0x75620000 [0075.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VirtualAlloc", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0075.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VirtualAlloc", cchWideChar=-1, lpMultiByteStr=0x339128, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VirtualAlloc", lpUsedDefaultChar=0x0) returned 13 [0075.268] GetProcAddress (hModule=0x75620000, lpProcName="VirtualAlloc") returned 0x75631836 [0075.270] lstrcpynW (in: lpString1=0x33d450, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.270] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x40) returned 0x2e00000 [0075.276] wsprintfW (in: param_1=0x33d450, param_2="%d" | out: param_1="64") returned 2 [0075.276] wsprintfW (in: param_1=0x33d450, param_2="%d" | out: param_1="12288") returned 5 [0075.276] wsprintfW (in: param_1=0x33d450, param_2="%d" | out: param_1="1048576") returned 7 [0075.276] wsprintfW (in: param_1=0x33d450, param_2="%d" | out: param_1="0") returned 1 [0075.276] wsprintfW (in: param_1=0x33d450, param_2="%d" | out: param_1="48234496") returned 8 [0075.276] lstrcpyW (in: lpString1=0x436800, lpString2="48234496" | out: lpString1="48234496") returned="48234496" [0075.277] lstrcpynW (in: lpString1=0x40a5f0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.277] lstrlenW (lpString="") returned 0 [0075.277] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.277] lstrlenW (lpString="") returned 0 [0075.277] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.277] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.277] lstrcpynW (in: lpString1=0x432ea0, lpString2="272", iMaxLength=1024 | out: lpString1="272") returned="272" [0075.277] lstrlenW (lpString="272") returned 3 [0075.277] lstrcpynW (in: lpString1=0x432ea0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.277] lstrcpynW (in: lpString1=0x40a5f0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0075.277] lstrlenW (lpString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returned 1023 [0075.277] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned="BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0075.277] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.277] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.277] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.277] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.277] lstrcpynW (in: lpString1=0x432ea4, lpString2="BECD27D2", iMaxLength=1024 | out: lpString1="BECD27D2") returned="BECD27D2" [0075.277] lstrlenW (lpString="BECD27D2") returned 8 [0075.277] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1262834254") returned 10 [0075.278] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.278] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.278] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.278] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.278] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.278] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.278] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.278] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.278] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.278] lstrcpynW (in: lpString1=0x432ea0, lpString2="1262834254", iMaxLength=1024 | out: lpString1="1262834254") returned="1262834254" [0075.278] lstrlenW (lpString="1262834254") returned 10 [0075.278] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="4B45524E") returned 8 [0075.278] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.278] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.279] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.279] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.279] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.279] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.279] lstrlenW (lpString="0") returned 1 [0075.279] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.279] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.279] lstrlenW (lpString="0") returned 1 [0075.279] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.279] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.279] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.279] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.279] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.279] lstrlenW (lpString="0") returned 1 [0075.279] lstrcpynW (in: lpString1=0x432ea0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0075.279] lstrlenW (lpString="4B45524E") returned 8 [0075.279] lstrcpynW (in: lpString1=0x40a5f0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0075.279] lstrlenW (lpString="4B45524E") returned 8 [0075.279] lstrcpynW (in: lpString1=0x46b000, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0075.279] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.279] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.279] lstrlenW (lpString="") returned 0 [0075.279] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.280] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.280] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.280] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.280] lstrcpynW (in: lpString1=0x432ea4, lpString2="4B", iMaxLength=1024 | out: lpString1="4B") returned="4B" [0075.280] lstrlenW (lpString="4B") returned 2 [0075.280] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="K") returned 1 [0075.280] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.280] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.280] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.280] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.280] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.280] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.280] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.280] lstrcpynW (in: lpString1=0x432ea0, lpString2="K", iMaxLength=1024 | out: lpString1="K") returned="K" [0075.280] lstrlenW (lpString="K") returned 1 [0075.280] lstrcpynW (in: lpString1=0x40b5f0, lpString2="K", iMaxLength=1024 | out: lpString1="K") returned="K" [0075.280] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.280] lstrcmpiW (lpString1="K", lpString2="^") returned 1 [0075.280] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.280] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.280] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.281] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.281] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.281] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.281] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.281] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.281] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.281] lstrlenW (lpString="") returned 0 [0075.281] lstrcpynW (in: lpString1=0x432ea0, lpString2="K", iMaxLength=1024 | out: lpString1="K") returned="K" [0075.281] lstrlenW (lpString="K") returned 1 [0075.281] lstrcpynW (in: lpString1=0x40a5f0, lpString2="K", iMaxLength=1024 | out: lpString1="K") returned="K" [0075.281] lstrlenW (lpString="K") returned 1 [0075.281] lstrcpynW (in: lpString1=0x46c000, lpString2="K", iMaxLength=1024 | out: lpString1="K") returned="K" [0075.281] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.281] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.281] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.281] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.281] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.282] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.282] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.282] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.282] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.282] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.282] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.282] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.282] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.282] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.282] lstrlenW (lpString="C:\\Windows") returned 10 [0075.282] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.282] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.282] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.283] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.283] lstrlenW (lpString="524386") returned 6 [0075.283] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.283] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.283] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.283] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.283] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.283] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.283] lstrlenW (lpString="0") returned 1 [0075.283] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.283] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.283] lstrlenW (lpString="2") returned 1 [0075.283] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.283] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.283] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.283] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.283] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.283] lstrlenW (lpString="2") returned 1 [0075.283] lstrcpynW (in: lpString1=0x432ea0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0075.283] lstrlenW (lpString="4B45524E") returned 8 [0075.283] lstrcpynW (in: lpString1=0x40a5f0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0075.283] lstrlenW (lpString="4B45524E") returned 8 [0075.283] lstrcpynW (in: lpString1=0x46b000, lpString2="45524E", iMaxLength=1024 | out: lpString1="45524E") returned="45524E" [0075.283] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.283] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.283] lstrlenW (lpString="") returned 0 [0075.284] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.284] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.284] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.284] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.284] lstrcpynW (in: lpString1=0x432ea4, lpString2="45", iMaxLength=1024 | out: lpString1="45") returned="45" [0075.284] lstrlenW (lpString="45") returned 2 [0075.284] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="E") returned 1 [0075.284] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.284] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.284] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.284] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.284] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.284] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.284] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.284] lstrcpynW (in: lpString1=0x432ea0, lpString2="E", iMaxLength=1024 | out: lpString1="E") returned="E" [0075.284] lstrlenW (lpString="E") returned 1 [0075.284] lstrcpynW (in: lpString1=0x40b5f0, lpString2="E", iMaxLength=1024 | out: lpString1="E") returned="E" [0075.284] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.284] lstrcmpiW (lpString1="E", lpString2="^") returned 1 [0075.284] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.284] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.285] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.285] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.285] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.285] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.285] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.285] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.285] lstrcpynW (in: lpString1=0x432ea0, lpString2="K", iMaxLength=1024 | out: lpString1="K") returned="K" [0075.285] lstrlenW (lpString="K") returned 1 [0075.285] lstrcpynW (in: lpString1=0x432ea2, lpString2="E", iMaxLength=1024 | out: lpString1="E") returned="E" [0075.285] lstrlenW (lpString="E") returned 1 [0075.285] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KE", iMaxLength=1024 | out: lpString1="KE") returned="KE" [0075.285] lstrlenW (lpString="KE") returned 2 [0075.285] lstrcpynW (in: lpString1=0x46c000, lpString2="KE", iMaxLength=1024 | out: lpString1="KE") returned="KE" [0075.285] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.285] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.285] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.285] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.286] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.286] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.286] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.286] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.286] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.286] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.286] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.286] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.286] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.286] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.286] lstrlenW (lpString="C:\\Windows") returned 10 [0075.286] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.286] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.287] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.287] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.287] lstrlenW (lpString="524386") returned 6 [0075.287] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.287] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.287] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.287] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.287] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.287] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.287] lstrlenW (lpString="2") returned 1 [0075.287] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.287] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.287] lstrlenW (lpString="4") returned 1 [0075.287] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.287] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.287] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.287] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.287] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.287] lstrlenW (lpString="4") returned 1 [0075.287] lstrcpynW (in: lpString1=0x432ea0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0075.287] lstrlenW (lpString="4B45524E") returned 8 [0075.287] lstrcpynW (in: lpString1=0x40a5f0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0075.287] lstrlenW (lpString="4B45524E") returned 8 [0075.287] lstrcpynW (in: lpString1=0x46b000, lpString2="524E", iMaxLength=1024 | out: lpString1="524E") returned="524E" [0075.287] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.287] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.287] lstrlenW (lpString="") returned 0 [0075.287] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.288] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.288] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.288] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.288] lstrcpynW (in: lpString1=0x432ea4, lpString2="52", iMaxLength=1024 | out: lpString1="52") returned="52" [0075.288] lstrlenW (lpString="52") returned 2 [0075.288] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="R") returned 1 [0075.288] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.288] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.288] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.288] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.288] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.288] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.288] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.288] lstrcpynW (in: lpString1=0x432ea0, lpString2="R", iMaxLength=1024 | out: lpString1="R") returned="R" [0075.288] lstrlenW (lpString="R") returned 1 [0075.288] lstrcpynW (in: lpString1=0x40b5f0, lpString2="R", iMaxLength=1024 | out: lpString1="R") returned="R" [0075.288] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.288] lstrcmpiW (lpString1="R", lpString2="^") returned 1 [0075.288] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.288] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.288] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.289] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.289] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.289] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.289] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.289] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.289] lstrcpynW (in: lpString1=0x432ea0, lpString2="KE", iMaxLength=1024 | out: lpString1="KE") returned="KE" [0075.289] lstrlenW (lpString="KE") returned 2 [0075.289] lstrcpynW (in: lpString1=0x432ea4, lpString2="R", iMaxLength=1024 | out: lpString1="R") returned="R" [0075.289] lstrlenW (lpString="R") returned 1 [0075.289] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KER", iMaxLength=1024 | out: lpString1="KER") returned="KER" [0075.289] lstrlenW (lpString="KER") returned 3 [0075.289] lstrcpynW (in: lpString1=0x46c000, lpString2="KER", iMaxLength=1024 | out: lpString1="KER") returned="KER" [0075.289] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.289] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.289] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.289] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.290] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.290] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.290] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.290] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.290] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.290] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.290] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.290] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.290] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.290] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.291] lstrlenW (lpString="C:\\Windows") returned 10 [0075.291] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.291] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.291] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.291] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.291] lstrlenW (lpString="524386") returned 6 [0075.291] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.291] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.291] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.291] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.291] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.291] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.291] lstrlenW (lpString="4") returned 1 [0075.291] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.291] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.291] lstrlenW (lpString="6") returned 1 [0075.291] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.291] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.291] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.291] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.291] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.291] lstrlenW (lpString="6") returned 1 [0075.291] lstrcpynW (in: lpString1=0x432ea0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0075.292] lstrlenW (lpString="4B45524E") returned 8 [0075.292] lstrcpynW (in: lpString1=0x40a5f0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0075.292] lstrlenW (lpString="4B45524E") returned 8 [0075.292] lstrcpynW (in: lpString1=0x46b000, lpString2="4E", iMaxLength=1024 | out: lpString1="4E") returned="4E" [0075.292] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.292] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.292] lstrlenW (lpString="") returned 0 [0075.292] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.292] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.292] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.292] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.292] lstrcpynW (in: lpString1=0x432ea4, lpString2="4E", iMaxLength=1024 | out: lpString1="4E") returned="4E" [0075.292] lstrlenW (lpString="4E") returned 2 [0075.292] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="N") returned 1 [0075.292] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.292] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.292] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.292] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.292] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.292] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.292] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.292] lstrcpynW (in: lpString1=0x432ea0, lpString2="N", iMaxLength=1024 | out: lpString1="N") returned="N" [0075.292] lstrlenW (lpString="N") returned 1 [0075.292] lstrcpynW (in: lpString1=0x40b5f0, lpString2="N", iMaxLength=1024 | out: lpString1="N") returned="N" [0075.292] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.292] lstrcmpiW (lpString1="N", lpString2="^") returned 1 [0075.293] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.293] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.293] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.293] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.293] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.293] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.293] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.293] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.293] lstrcpynW (in: lpString1=0x432ea0, lpString2="KER", iMaxLength=1024 | out: lpString1="KER") returned="KER" [0075.293] lstrlenW (lpString="KER") returned 3 [0075.293] lstrcpynW (in: lpString1=0x432ea6, lpString2="N", iMaxLength=1024 | out: lpString1="N") returned="N" [0075.293] lstrlenW (lpString="N") returned 1 [0075.293] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERN", iMaxLength=1024 | out: lpString1="KERN") returned="KERN" [0075.293] lstrlenW (lpString="KERN") returned 4 [0075.293] lstrcpynW (in: lpString1=0x46c000, lpString2="KERN", iMaxLength=1024 | out: lpString1="KERN") returned="KERN" [0075.293] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.293] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.293] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.294] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.294] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.294] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.294] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.294] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.294] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.294] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.294] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.294] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.294] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.294] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.294] lstrlenW (lpString="C:\\Windows") returned 10 [0075.294] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.295] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.295] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.295] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.295] lstrlenW (lpString="524386") returned 6 [0075.295] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.295] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.295] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.295] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.295] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.295] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.295] lstrlenW (lpString="6") returned 1 [0075.295] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.295] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.295] lstrlenW (lpString="8") returned 1 [0075.295] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.295] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.295] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.295] lstrlenW (lpString="Execute: ") returned 9 [0075.295] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.295] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.295] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.296] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x2f [0075.296] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x2f [0075.296] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x2f, lParam=0x0) returned 0x1 [0075.296] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.297] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.297] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.297] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.297] lstrcpynW (in: lpString1=0x432ea0, lpString2="272", iMaxLength=1024 | out: lpString1="272") returned="272" [0075.297] lstrlenW (lpString="272") returned 3 [0075.297] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="280") returned 3 [0075.297] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.297] lstrlenW (lpString="") returned 0 [0075.297] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.297] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.297] lstrcpynW (in: lpString1=0x432ea0, lpString2="280", iMaxLength=1024 | out: lpString1="280") returned="280" [0075.297] lstrlenW (lpString="280") returned 3 [0075.297] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.297] lstrcpynW (in: lpString1=0x40a5f0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0075.297] lstrlenW (lpString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returned 1023 [0075.297] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.297] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.297] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.298] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.298] lstrcpynW (in: lpString1=0x432ea4, lpString2="B0C446AE", iMaxLength=1024 | out: lpString1="B0C446AE") returned="B0C446AE" [0075.298] lstrlenW (lpString="B0C446AE") returned 8 [0075.298] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1162621746") returned 10 [0075.298] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.298] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.298] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.298] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.298] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.298] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.298] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.298] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.298] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.298] lstrcpynW (in: lpString1=0x432ea0, lpString2="1162621746", iMaxLength=1024 | out: lpString1="1162621746") returned="1162621746" [0075.298] lstrlenW (lpString="1162621746") returned 10 [0075.298] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="454C3332") returned 8 [0075.298] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.299] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.299] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.299] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.299] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.299] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.299] lstrlenW (lpString="0") returned 1 [0075.299] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.299] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.299] lstrlenW (lpString="0") returned 1 [0075.299] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.299] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.299] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.299] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.299] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.299] lstrlenW (lpString="0") returned 1 [0075.299] lstrcpynW (in: lpString1=0x432ea0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0075.299] lstrlenW (lpString="454C3332") returned 8 [0075.299] lstrcpynW (in: lpString1=0x40a5f0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0075.299] lstrlenW (lpString="454C3332") returned 8 [0075.299] lstrcpynW (in: lpString1=0x46b000, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0075.299] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.299] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.299] lstrlenW (lpString="") returned 0 [0075.300] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.300] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.300] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.300] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.300] lstrcpynW (in: lpString1=0x432ea4, lpString2="45", iMaxLength=1024 | out: lpString1="45") returned="45" [0075.300] lstrlenW (lpString="45") returned 2 [0075.300] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="E") returned 1 [0075.300] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.300] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.300] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.300] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.300] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.300] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.300] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.300] lstrcpynW (in: lpString1=0x432ea0, lpString2="E", iMaxLength=1024 | out: lpString1="E") returned="E" [0075.300] lstrlenW (lpString="E") returned 1 [0075.300] lstrcpynW (in: lpString1=0x40b5f0, lpString2="E", iMaxLength=1024 | out: lpString1="E") returned="E" [0075.300] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.300] lstrcmpiW (lpString1="E", lpString2="^") returned 1 [0075.300] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.300] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.300] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.301] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.301] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.301] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.301] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.301] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.301] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERN", iMaxLength=1024 | out: lpString1="KERN") returned="KERN" [0075.301] lstrlenW (lpString="KERN") returned 4 [0075.301] lstrcpynW (in: lpString1=0x432ea8, lpString2="E", iMaxLength=1024 | out: lpString1="E") returned="E" [0075.301] lstrlenW (lpString="E") returned 1 [0075.301] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNE", iMaxLength=1024 | out: lpString1="KERNE") returned="KERNE" [0075.301] lstrlenW (lpString="KERNE") returned 5 [0075.301] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNE", iMaxLength=1024 | out: lpString1="KERNE") returned="KERNE" [0075.301] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.301] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.301] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.301] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.301] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.302] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.302] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.302] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.302] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.302] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.302] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.302] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.302] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.302] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.302] lstrlenW (lpString="C:\\Windows") returned 10 [0075.302] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.302] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.302] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.303] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.303] lstrlenW (lpString="524386") returned 6 [0075.303] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.303] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.303] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.303] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.303] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.303] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.303] lstrlenW (lpString="0") returned 1 [0075.303] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.303] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.303] lstrlenW (lpString="2") returned 1 [0075.303] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.303] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.303] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.303] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.303] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.303] lstrlenW (lpString="2") returned 1 [0075.303] lstrcpynW (in: lpString1=0x432ea0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0075.303] lstrlenW (lpString="454C3332") returned 8 [0075.303] lstrcpynW (in: lpString1=0x40a5f0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0075.303] lstrlenW (lpString="454C3332") returned 8 [0075.303] lstrcpynW (in: lpString1=0x46b000, lpString2="4C3332", iMaxLength=1024 | out: lpString1="4C3332") returned="4C3332" [0075.303] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.303] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.303] lstrlenW (lpString="") returned 0 [0075.303] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.304] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.304] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.304] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.304] lstrcpynW (in: lpString1=0x432ea4, lpString2="4C", iMaxLength=1024 | out: lpString1="4C") returned="4C" [0075.304] lstrlenW (lpString="4C") returned 2 [0075.304] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="L") returned 1 [0075.304] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.304] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.304] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.304] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.304] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.304] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.304] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.304] lstrcpynW (in: lpString1=0x432ea0, lpString2="L", iMaxLength=1024 | out: lpString1="L") returned="L" [0075.304] lstrlenW (lpString="L") returned 1 [0075.304] lstrcpynW (in: lpString1=0x40b5f0, lpString2="L", iMaxLength=1024 | out: lpString1="L") returned="L" [0075.304] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.304] lstrcmpiW (lpString1="L", lpString2="^") returned 1 [0075.304] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.304] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.304] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.305] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.305] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.305] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.305] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.305] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.305] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNE", iMaxLength=1024 | out: lpString1="KERNE") returned="KERNE" [0075.305] lstrlenW (lpString="KERNE") returned 5 [0075.305] lstrcpynW (in: lpString1=0x432eaa, lpString2="L", iMaxLength=1024 | out: lpString1="L") returned="L" [0075.305] lstrlenW (lpString="L") returned 1 [0075.305] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL", iMaxLength=1024 | out: lpString1="KERNEL") returned="KERNEL" [0075.305] lstrlenW (lpString="KERNEL") returned 6 [0075.305] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL", iMaxLength=1024 | out: lpString1="KERNEL") returned="KERNEL" [0075.305] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.305] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.305] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.305] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.306] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.306] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.306] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.306] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.306] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.306] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.306] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.306] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.306] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.306] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.306] lstrlenW (lpString="C:\\Windows") returned 10 [0075.306] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.307] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.307] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.307] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.307] lstrlenW (lpString="524386") returned 6 [0075.307] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.307] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.307] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.307] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.307] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.307] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.307] lstrlenW (lpString="2") returned 1 [0075.307] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.307] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.307] lstrlenW (lpString="4") returned 1 [0075.307] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.307] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.307] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.307] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.307] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.307] lstrlenW (lpString="4") returned 1 [0075.307] lstrcpynW (in: lpString1=0x432ea0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0075.307] lstrlenW (lpString="454C3332") returned 8 [0075.308] lstrcpynW (in: lpString1=0x40a5f0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0075.308] lstrlenW (lpString="454C3332") returned 8 [0075.308] lstrcpynW (in: lpString1=0x46b000, lpString2="3332", iMaxLength=1024 | out: lpString1="3332") returned="3332" [0075.308] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.308] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.308] lstrlenW (lpString="") returned 0 [0075.308] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.308] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.308] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.308] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.308] lstrcpynW (in: lpString1=0x432ea4, lpString2="33", iMaxLength=1024 | out: lpString1="33") returned="33" [0075.308] lstrlenW (lpString="33") returned 2 [0075.308] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="3") returned 1 [0075.308] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.308] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.308] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.308] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.308] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.308] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.308] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.308] lstrcpynW (in: lpString1=0x432ea0, lpString2="3", iMaxLength=1024 | out: lpString1="3") returned="3" [0075.309] lstrlenW (lpString="3") returned 1 [0075.309] lstrcpynW (in: lpString1=0x40b5f0, lpString2="3", iMaxLength=1024 | out: lpString1="3") returned="3" [0075.309] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.309] lstrcmpiW (lpString1="3", lpString2="^") returned 1 [0075.309] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.309] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.309] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.309] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.309] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.309] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.309] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.309] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.309] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL", iMaxLength=1024 | out: lpString1="KERNEL") returned="KERNEL" [0075.309] lstrlenW (lpString="KERNEL") returned 6 [0075.309] lstrcpynW (in: lpString1=0x432eac, lpString2="3", iMaxLength=1024 | out: lpString1="3") returned="3" [0075.310] lstrlenW (lpString="3") returned 1 [0075.310] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL3", iMaxLength=1024 | out: lpString1="KERNEL3") returned="KERNEL3" [0075.310] lstrlenW (lpString="KERNEL3") returned 7 [0075.310] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL3", iMaxLength=1024 | out: lpString1="KERNEL3") returned="KERNEL3" [0075.310] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.310] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.310] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.310] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.310] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.310] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.310] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.310] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.310] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.311] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.311] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.311] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.311] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.311] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.311] lstrlenW (lpString="C:\\Windows") returned 10 [0075.311] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.311] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.311] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.311] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.311] lstrlenW (lpString="524386") returned 6 [0075.311] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.311] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.311] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.312] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.312] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.312] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.312] lstrlenW (lpString="4") returned 1 [0075.312] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.312] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.312] lstrlenW (lpString="6") returned 1 [0075.312] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.312] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.312] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.312] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.312] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.312] lstrlenW (lpString="6") returned 1 [0075.312] lstrcpynW (in: lpString1=0x432ea0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0075.312] lstrlenW (lpString="454C3332") returned 8 [0075.312] lstrcpynW (in: lpString1=0x40a5f0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0075.312] lstrlenW (lpString="454C3332") returned 8 [0075.312] lstrcpynW (in: lpString1=0x46b000, lpString2="32", iMaxLength=1024 | out: lpString1="32") returned="32" [0075.312] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.312] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.312] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.312] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="2") returned 1 [0075.312] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.312] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.313] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.313] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.313] lstrcmpiW (lpString1="2", lpString2="^") returned 1 [0075.313] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.313] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.313] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.313] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.313] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.313] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.313] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.314] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.314] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL3", iMaxLength=1024 | out: lpString1="KERNEL3") returned="KERNEL3" [0075.314] lstrlenW (lpString="KERNEL3") returned 7 [0075.314] lstrcpynW (in: lpString1=0x432eae, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.314] lstrlenW (lpString="2") returned 1 [0075.314] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32", iMaxLength=1024 | out: lpString1="KERNEL32") returned="KERNEL32" [0075.314] lstrlenW (lpString="KERNEL32") returned 8 [0075.314] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32", iMaxLength=1024 | out: lpString1="KERNEL32") returned="KERNEL32" [0075.314] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.314] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.314] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.314] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.314] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.314] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.314] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.314] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.315] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.315] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.315] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.315] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.315] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.315] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.315] lstrlenW (lpString="C:\\Windows") returned 10 [0075.315] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.315] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.315] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.315] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.315] lstrlenW (lpString="524386") returned 6 [0075.315] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.316] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.316] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.316] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.316] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.316] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.316] lstrlenW (lpString="6") returned 1 [0075.316] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.316] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.316] lstrlenW (lpString="8") returned 1 [0075.316] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.316] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.316] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.316] lstrlenW (lpString="Execute: ") returned 9 [0075.316] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.316] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.316] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.317] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x30 [0075.317] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x30 [0075.317] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x30, lParam=0x0) returned 0x1 [0075.317] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.317] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.317] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.318] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.318] lstrcpynW (in: lpString1=0x432ea0, lpString2="280", iMaxLength=1024 | out: lpString1="280") returned="280" [0075.318] lstrlenW (lpString="280") returned 3 [0075.318] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="288") returned 3 [0075.318] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.318] lstrlenW (lpString="") returned 0 [0075.318] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.318] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.318] lstrcpynW (in: lpString1=0x432ea0, lpString2="288", iMaxLength=1024 | out: lpString1="288") returned="288" [0075.318] lstrlenW (lpString="288") returned 3 [0075.318] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0075.318] lstrlenW (lpString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returned 1023 [0075.318] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned 1023 [0075.318] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.318] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.318] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.318] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.319] lstrcpynW (in: lpString1=0x432ea4, lpString2="CFB226F9", iMaxLength=1024 | out: lpString1="CFB226F9") returned="CFB226F9" [0075.319] lstrlenW (lpString="CFB226F9") returned 8 [0075.319] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="976900965") returned 9 [0075.319] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.319] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.319] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.319] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.319] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.319] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.319] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.319] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.319] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.319] lstrcpynW (in: lpString1=0x432ea0, lpString2="976900965", iMaxLength=1024 | out: lpString1="976900965") returned="976900965" [0075.319] lstrlenW (lpString="976900965") returned 9 [0075.319] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="3A3A5365") returned 8 [0075.320] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.320] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.320] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.321] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.321] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.321] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.321] lstrlenW (lpString="0") returned 1 [0075.321] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.321] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.321] lstrlenW (lpString="0") returned 1 [0075.321] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.321] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.321] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.321] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.321] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.322] lstrlenW (lpString="0") returned 1 [0075.322] lstrcpynW (in: lpString1=0x432ea0, lpString2="3A3A5365", iMaxLength=1024 | out: lpString1="3A3A5365") returned="3A3A5365" [0075.322] lstrlenW (lpString="3A3A5365") returned 8 [0075.322] lstrcpynW (in: lpString1=0x40a5f0, lpString2="3A3A5365", iMaxLength=1024 | out: lpString1="3A3A5365") returned="3A3A5365" [0075.322] lstrlenW (lpString="3A3A5365") returned 8 [0075.322] lstrcpynW (in: lpString1=0x46b000, lpString2="3A3A5365", iMaxLength=1024 | out: lpString1="3A3A5365") returned="3A3A5365" [0075.322] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.322] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.322] lstrlenW (lpString="") returned 0 [0075.322] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.322] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.322] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.322] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.322] lstrcpynW (in: lpString1=0x432ea4, lpString2="3A", iMaxLength=1024 | out: lpString1="3A") returned="3A" [0075.322] lstrlenW (lpString="3A") returned 2 [0075.322] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=":") returned 1 [0075.322] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.322] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.322] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.323] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.323] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.323] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.323] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.323] lstrcpynW (in: lpString1=0x432ea0, lpString2=":", iMaxLength=1024 | out: lpString1=":") returned=":" [0075.323] lstrlenW (lpString=":") returned 1 [0075.323] lstrcpynW (in: lpString1=0x40b5f0, lpString2=":", iMaxLength=1024 | out: lpString1=":") returned=":" [0075.323] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.323] lstrcmpiW (lpString1=":", lpString2="^") returned -1 [0075.323] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.323] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.323] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.323] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.323] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.323] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.324] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.324] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.324] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32", iMaxLength=1024 | out: lpString1="KERNEL32") returned="KERNEL32" [0075.324] lstrlenW (lpString="KERNEL32") returned 8 [0075.324] lstrcpynW (in: lpString1=0x432eb0, lpString2=":", iMaxLength=1024 | out: lpString1=":") returned=":" [0075.324] lstrlenW (lpString=":") returned 1 [0075.324] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32:", iMaxLength=1024 | out: lpString1="KERNEL32:") returned="KERNEL32:" [0075.324] lstrlenW (lpString="KERNEL32:") returned 9 [0075.324] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32:", iMaxLength=1024 | out: lpString1="KERNEL32:") returned="KERNEL32:" [0075.324] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.324] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.324] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.324] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.324] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.324] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.324] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.324] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.325] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.325] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.325] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.325] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.325] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.325] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.325] lstrlenW (lpString="C:\\Windows") returned 10 [0075.325] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.326] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.326] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.326] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.326] lstrlenW (lpString="524386") returned 6 [0075.326] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.326] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.326] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.326] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.326] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.326] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.326] lstrlenW (lpString="0") returned 1 [0075.326] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.326] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.326] lstrlenW (lpString="2") returned 1 [0075.326] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.326] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.326] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.326] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.327] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.327] lstrlenW (lpString="2") returned 1 [0075.327] lstrcpynW (in: lpString1=0x432ea0, lpString2="3A3A5365", iMaxLength=1024 | out: lpString1="3A3A5365") returned="3A3A5365" [0075.327] lstrlenW (lpString="3A3A5365") returned 8 [0075.327] lstrcpynW (in: lpString1=0x40a5f0, lpString2="3A3A5365", iMaxLength=1024 | out: lpString1="3A3A5365") returned="3A3A5365" [0075.327] lstrlenW (lpString="3A3A5365") returned 8 [0075.327] lstrcpynW (in: lpString1=0x46b000, lpString2="3A5365", iMaxLength=1024 | out: lpString1="3A5365") returned="3A5365" [0075.327] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.327] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.327] lstrlenW (lpString="") returned 0 [0075.327] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.327] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.327] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.327] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.327] lstrcpynW (in: lpString1=0x432ea4, lpString2="3A", iMaxLength=1024 | out: lpString1="3A") returned="3A" [0075.327] lstrlenW (lpString="3A") returned 2 [0075.327] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=":") returned 1 [0075.328] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.328] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.328] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.328] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.328] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.328] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.328] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.328] lstrcpynW (in: lpString1=0x432ea0, lpString2=":", iMaxLength=1024 | out: lpString1=":") returned=":" [0075.328] lstrlenW (lpString=":") returned 1 [0075.328] lstrcpynW (in: lpString1=0x40b5f0, lpString2=":", iMaxLength=1024 | out: lpString1=":") returned=":" [0075.328] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.328] lstrcmpiW (lpString1=":", lpString2="^") returned -1 [0075.328] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.328] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.329] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.329] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.329] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.329] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.329] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.329] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.329] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32:", iMaxLength=1024 | out: lpString1="KERNEL32:") returned="KERNEL32:" [0075.329] lstrlenW (lpString="KERNEL32:") returned 9 [0075.329] lstrcpynW (in: lpString1=0x432eb2, lpString2=":", iMaxLength=1024 | out: lpString1=":") returned=":" [0075.329] lstrlenW (lpString=":") returned 1 [0075.329] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::", iMaxLength=1024 | out: lpString1="KERNEL32::") returned="KERNEL32::" [0075.329] lstrlenW (lpString="KERNEL32::") returned 10 [0075.329] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::", iMaxLength=1024 | out: lpString1="KERNEL32::") returned="KERNEL32::" [0075.329] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.329] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.329] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.329] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.330] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.330] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.330] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.330] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.330] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.330] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.330] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.330] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.330] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.330] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.331] lstrlenW (lpString="C:\\Windows") returned 10 [0075.331] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.331] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.331] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.331] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.331] lstrlenW (lpString="524386") returned 6 [0075.331] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.331] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.331] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.331] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.331] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.331] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.331] lstrlenW (lpString="2") returned 1 [0075.331] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.331] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.331] lstrlenW (lpString="4") returned 1 [0075.331] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.331] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.331] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.332] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.332] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.332] lstrlenW (lpString="4") returned 1 [0075.332] lstrcpynW (in: lpString1=0x432ea0, lpString2="3A3A5365", iMaxLength=1024 | out: lpString1="3A3A5365") returned="3A3A5365" [0075.332] lstrlenW (lpString="3A3A5365") returned 8 [0075.332] lstrcpynW (in: lpString1=0x40a5f0, lpString2="3A3A5365", iMaxLength=1024 | out: lpString1="3A3A5365") returned="3A3A5365" [0075.332] lstrlenW (lpString="3A3A5365") returned 8 [0075.332] lstrcpynW (in: lpString1=0x46b000, lpString2="5365", iMaxLength=1024 | out: lpString1="5365") returned="5365" [0075.332] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.332] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.332] lstrlenW (lpString="") returned 0 [0075.332] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.332] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.332] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.332] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.332] lstrcpynW (in: lpString1=0x432ea4, lpString2="53", iMaxLength=1024 | out: lpString1="53") returned="53" [0075.332] lstrlenW (lpString="53") returned 2 [0075.332] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="S") returned 1 [0075.332] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.332] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.332] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.332] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.333] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.333] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.333] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.333] lstrcpynW (in: lpString1=0x432ea0, lpString2="S", iMaxLength=1024 | out: lpString1="S") returned="S" [0075.333] lstrlenW (lpString="S") returned 1 [0075.333] lstrcpynW (in: lpString1=0x40b5f0, lpString2="S", iMaxLength=1024 | out: lpString1="S") returned="S" [0075.333] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.333] lstrcmpiW (lpString1="S", lpString2="^") returned 1 [0075.333] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.333] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.333] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.333] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.333] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.333] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.333] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.333] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.334] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::", iMaxLength=1024 | out: lpString1="KERNEL32::") returned="KERNEL32::" [0075.334] lstrlenW (lpString="KERNEL32::") returned 10 [0075.334] lstrcpynW (in: lpString1=0x432eb4, lpString2="S", iMaxLength=1024 | out: lpString1="S") returned="S" [0075.334] lstrlenW (lpString="S") returned 1 [0075.334] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::S", iMaxLength=1024 | out: lpString1="KERNEL32::S") returned="KERNEL32::S" [0075.334] lstrlenW (lpString="KERNEL32::S") returned 11 [0075.334] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::S", iMaxLength=1024 | out: lpString1="KERNEL32::S") returned="KERNEL32::S" [0075.334] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.334] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.334] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.334] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.334] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.334] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.334] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.334] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.335] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.335] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.335] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.335] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.335] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.335] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.335] lstrlenW (lpString="C:\\Windows") returned 10 [0075.335] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.335] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.335] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.335] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.335] lstrlenW (lpString="524386") returned 6 [0075.335] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.335] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.335] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.335] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.336] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.336] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.336] lstrlenW (lpString="4") returned 1 [0075.336] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.336] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.336] lstrlenW (lpString="6") returned 1 [0075.336] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.336] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.336] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.336] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.336] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.336] lstrlenW (lpString="6") returned 1 [0075.336] lstrcpynW (in: lpString1=0x432ea0, lpString2="3A3A5365", iMaxLength=1024 | out: lpString1="3A3A5365") returned="3A3A5365" [0075.336] lstrlenW (lpString="3A3A5365") returned 8 [0075.336] lstrcpynW (in: lpString1=0x40a5f0, lpString2="3A3A5365", iMaxLength=1024 | out: lpString1="3A3A5365") returned="3A3A5365" [0075.336] lstrlenW (lpString="3A3A5365") returned 8 [0075.336] lstrcpynW (in: lpString1=0x46b000, lpString2="65", iMaxLength=1024 | out: lpString1="65") returned="65" [0075.336] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.344] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.344] lstrlenW (lpString="") returned 0 [0075.344] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.344] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.344] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.344] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.344] lstrcpynW (in: lpString1=0x432ea4, lpString2="65", iMaxLength=1024 | out: lpString1="65") returned="65" [0075.344] lstrlenW (lpString="65") returned 2 [0075.344] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="e") returned 1 [0075.344] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.344] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.345] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.346] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.346] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.346] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.346] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.346] lstrcpynW (in: lpString1=0x432ea0, lpString2="e", iMaxLength=1024 | out: lpString1="e") returned="e" [0075.346] lstrlenW (lpString="e") returned 1 [0075.346] lstrcpynW (in: lpString1=0x40b5f0, lpString2="e", iMaxLength=1024 | out: lpString1="e") returned="e" [0075.347] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.347] lstrcmpiW (lpString1="e", lpString2="^") returned 1 [0075.347] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.347] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.347] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.347] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.347] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.347] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.347] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.347] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.347] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::S", iMaxLength=1024 | out: lpString1="KERNEL32::S") returned="KERNEL32::S" [0075.347] lstrlenW (lpString="KERNEL32::S") returned 11 [0075.348] lstrcpynW (in: lpString1=0x432eb6, lpString2="e", iMaxLength=1024 | out: lpString1="e") returned="e" [0075.348] lstrlenW (lpString="e") returned 1 [0075.348] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::Se", iMaxLength=1024 | out: lpString1="KERNEL32::Se") returned="KERNEL32::Se" [0075.348] lstrlenW (lpString="KERNEL32::Se") returned 12 [0075.348] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::Se", iMaxLength=1024 | out: lpString1="KERNEL32::Se") returned="KERNEL32::Se" [0075.348] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.348] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.348] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.348] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.348] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.348] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.348] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.348] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.348] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.348] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.349] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.349] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.349] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.349] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.349] lstrlenW (lpString="C:\\Windows") returned 10 [0075.349] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.349] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.349] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.349] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.349] lstrlenW (lpString="524386") returned 6 [0075.349] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.349] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.349] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.349] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.349] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.349] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.350] lstrlenW (lpString="6") returned 1 [0075.350] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.350] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.350] lstrlenW (lpString="8") returned 1 [0075.350] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.350] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.350] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.350] lstrlenW (lpString="Execute: ") returned 9 [0075.350] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.350] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.350] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.350] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x31 [0075.351] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x31 [0075.351] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x31, lParam=0x0) returned 0x1 [0075.351] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.351] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.351] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.352] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.352] lstrcpynW (in: lpString1=0x432ea0, lpString2="288", iMaxLength=1024 | out: lpString1="288") returned="288" [0075.352] lstrlenW (lpString="288") returned 3 [0075.352] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="296") returned 3 [0075.352] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.352] lstrlenW (lpString="") returned 0 [0075.352] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.352] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.352] lstrcpynW (in: lpString1=0x432ea0, lpString2="296", iMaxLength=1024 | out: lpString1="296") returned="296" [0075.352] lstrlenW (lpString="296") returned 3 [0075.352] lstrcpynW (in: lpString1=0x432ea0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0075.352] lstrlenW (lpString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returned 1023 [0075.352] lstrcpynW (in: lpString1=0x40a5f0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.352] lstrcpynW (in: lpString1=0x46d000, lpString2="81CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString1="81CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.352] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.353] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.353] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.353] lstrcpynW (in: lpString1=0x432ea4, lpString2="81CE1CF0", iMaxLength=1024 | out: lpString1="81CE1CF0") returned="81CE1CF0" [0075.353] lstrlenW (lpString="81CE1CF0") returned 8 [0075.353] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1950771564") returned 10 [0075.353] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.353] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.353] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.353] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.353] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.353] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.353] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.353] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.353] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.354] lstrcpynW (in: lpString1=0x432ea0, lpString2="1950771564", iMaxLength=1024 | out: lpString1="1950771564") returned="1950771564" [0075.354] lstrlenW (lpString="1950771564") returned 10 [0075.354] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="7446696C") returned 8 [0075.354] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.354] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.354] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.354] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.354] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.354] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.354] lstrlenW (lpString="0") returned 1 [0075.354] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.354] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.354] lstrlenW (lpString="0") returned 1 [0075.354] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.354] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.354] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.354] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.354] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.354] lstrlenW (lpString="0") returned 1 [0075.354] lstrcpynW (in: lpString1=0x432ea0, lpString2="7446696C", iMaxLength=1024 | out: lpString1="7446696C") returned="7446696C" [0075.354] lstrlenW (lpString="7446696C") returned 8 [0075.355] lstrcpynW (in: lpString1=0x40a5f0, lpString2="7446696C", iMaxLength=1024 | out: lpString1="7446696C") returned="7446696C" [0075.355] lstrlenW (lpString="7446696C") returned 8 [0075.355] lstrcpynW (in: lpString1=0x46b000, lpString2="7446696C", iMaxLength=1024 | out: lpString1="7446696C") returned="7446696C" [0075.355] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.355] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.355] lstrlenW (lpString="") returned 0 [0075.355] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.355] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.355] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.355] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.355] lstrcpynW (in: lpString1=0x432ea4, lpString2="74", iMaxLength=1024 | out: lpString1="74") returned="74" [0075.355] lstrlenW (lpString="74") returned 2 [0075.355] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="t") returned 1 [0075.355] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.355] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.355] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.355] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.355] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.355] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.355] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.355] lstrcpynW (in: lpString1=0x432ea0, lpString2="t", iMaxLength=1024 | out: lpString1="t") returned="t" [0075.355] lstrlenW (lpString="t") returned 1 [0075.355] lstrcpynW (in: lpString1=0x40b5f0, lpString2="t", iMaxLength=1024 | out: lpString1="t") returned="t" [0075.355] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.356] lstrcmpiW (lpString1="t", lpString2="^") returned 1 [0075.356] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.356] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.356] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.356] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.356] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.356] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.356] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.356] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.356] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::Se", iMaxLength=1024 | out: lpString1="KERNEL32::Se") returned="KERNEL32::Se" [0075.356] lstrlenW (lpString="KERNEL32::Se") returned 12 [0075.356] lstrcpynW (in: lpString1=0x432eb8, lpString2="t", iMaxLength=1024 | out: lpString1="t") returned="t" [0075.356] lstrlenW (lpString="t") returned 1 [0075.356] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::Set", iMaxLength=1024 | out: lpString1="KERNEL32::Set") returned="KERNEL32::Set" [0075.356] lstrlenW (lpString="KERNEL32::Set") returned 13 [0075.356] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::Set", iMaxLength=1024 | out: lpString1="KERNEL32::Set") returned="KERNEL32::Set" [0075.356] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.357] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.357] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.357] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.357] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.357] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.357] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.357] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.357] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.357] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.357] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.357] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.357] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.357] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.358] lstrlenW (lpString="C:\\Windows") returned 10 [0075.358] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.358] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.358] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.358] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.358] lstrlenW (lpString="524386") returned 6 [0075.358] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.358] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.358] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.358] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.358] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.358] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.358] lstrlenW (lpString="0") returned 1 [0075.358] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.358] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.358] lstrlenW (lpString="2") returned 1 [0075.358] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.358] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.358] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.358] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.358] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.358] lstrlenW (lpString="2") returned 1 [0075.358] lstrcpynW (in: lpString1=0x432ea0, lpString2="7446696C", iMaxLength=1024 | out: lpString1="7446696C") returned="7446696C" [0075.358] lstrlenW (lpString="7446696C") returned 8 [0075.359] lstrcpynW (in: lpString1=0x40a5f0, lpString2="7446696C", iMaxLength=1024 | out: lpString1="7446696C") returned="7446696C" [0075.359] lstrlenW (lpString="7446696C") returned 8 [0075.359] lstrcpynW (in: lpString1=0x46b000, lpString2="46696C", iMaxLength=1024 | out: lpString1="46696C") returned="46696C" [0075.359] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.359] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.359] lstrlenW (lpString="") returned 0 [0075.359] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.359] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.359] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.359] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.359] lstrcpynW (in: lpString1=0x432ea4, lpString2="46", iMaxLength=1024 | out: lpString1="46") returned="46" [0075.359] lstrlenW (lpString="46") returned 2 [0075.359] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="F") returned 1 [0075.359] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.359] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.359] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.359] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.359] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.359] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.359] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.359] lstrcpynW (in: lpString1=0x432ea0, lpString2="F", iMaxLength=1024 | out: lpString1="F") returned="F" [0075.359] lstrlenW (lpString="F") returned 1 [0075.359] lstrcpynW (in: lpString1=0x40b5f0, lpString2="F", iMaxLength=1024 | out: lpString1="F") returned="F" [0075.359] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.360] lstrcmpiW (lpString1="F", lpString2="^") returned 1 [0075.360] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.360] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.360] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.360] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.360] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.360] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.360] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.360] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.360] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::Set", iMaxLength=1024 | out: lpString1="KERNEL32::Set") returned="KERNEL32::Set" [0075.360] lstrlenW (lpString="KERNEL32::Set") returned 13 [0075.360] lstrcpynW (in: lpString1=0x432eba, lpString2="F", iMaxLength=1024 | out: lpString1="F") returned="F" [0075.360] lstrlenW (lpString="F") returned 1 [0075.360] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetF", iMaxLength=1024 | out: lpString1="KERNEL32::SetF") returned="KERNEL32::SetF" [0075.360] lstrlenW (lpString="KERNEL32::SetF") returned 14 [0075.360] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetF", iMaxLength=1024 | out: lpString1="KERNEL32::SetF") returned="KERNEL32::SetF" [0075.361] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.361] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.361] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.361] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.361] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.361] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.361] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.361] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.361] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.361] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.361] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.361] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.361] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.362] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.362] lstrlenW (lpString="C:\\Windows") returned 10 [0075.362] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.362] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.362] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.362] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.362] lstrlenW (lpString="524386") returned 6 [0075.362] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.362] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.362] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.362] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.362] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.362] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.362] lstrlenW (lpString="2") returned 1 [0075.362] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.362] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.362] lstrlenW (lpString="4") returned 1 [0075.362] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.362] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.362] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.362] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.362] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.362] lstrlenW (lpString="4") returned 1 [0075.362] lstrcpynW (in: lpString1=0x432ea0, lpString2="7446696C", iMaxLength=1024 | out: lpString1="7446696C") returned="7446696C" [0075.363] lstrlenW (lpString="7446696C") returned 8 [0075.363] lstrcpynW (in: lpString1=0x40a5f0, lpString2="7446696C", iMaxLength=1024 | out: lpString1="7446696C") returned="7446696C" [0075.363] lstrlenW (lpString="7446696C") returned 8 [0075.363] lstrcpynW (in: lpString1=0x46b000, lpString2="696C", iMaxLength=1024 | out: lpString1="696C") returned="696C" [0075.363] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.363] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.363] lstrlenW (lpString="") returned 0 [0075.363] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.363] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.363] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.363] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.363] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0075.363] lstrlenW (lpString="69") returned 2 [0075.363] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0075.363] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.363] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.363] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.363] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.363] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.363] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.363] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.363] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.363] lstrlenW (lpString="i") returned 1 [0075.363] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.363] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.363] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0075.364] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.364] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.364] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.364] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.364] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.364] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.364] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.364] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.364] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.364] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.364] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.364] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.365] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.365] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.365] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.365] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.365] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.365] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.365] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.365] lstrlenW (lpString="C:\\Windows") returned 10 [0075.365] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.365] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.365] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.365] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.365] lstrlenW (lpString="524386") returned 6 [0075.365] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.365] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.366] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.366] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.366] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.366] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.366] lstrlenW (lpString="4") returned 1 [0075.366] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.366] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.366] lstrlenW (lpString="6") returned 1 [0075.366] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.366] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.366] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.366] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.366] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.366] lstrlenW (lpString="6") returned 1 [0075.366] lstrcpynW (in: lpString1=0x432ea0, lpString2="7446696C", iMaxLength=1024 | out: lpString1="7446696C") returned="7446696C" [0075.366] lstrlenW (lpString="7446696C") returned 8 [0075.366] lstrcpynW (in: lpString1=0x40a5f0, lpString2="7446696C", iMaxLength=1024 | out: lpString1="7446696C") returned="7446696C" [0075.366] lstrlenW (lpString="7446696C") returned 8 [0075.366] lstrcpynW (in: lpString1=0x46b000, lpString2="6C", iMaxLength=1024 | out: lpString1="6C") returned="6C" [0075.366] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.366] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.366] lstrlenW (lpString="") returned 0 [0075.366] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.366] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.366] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.366] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.366] lstrcpynW (in: lpString1=0x432ea4, lpString2="6C", iMaxLength=1024 | out: lpString1="6C") returned="6C" [0075.366] lstrlenW (lpString="6C") returned 2 [0075.366] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="l") returned 1 [0075.366] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.367] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.367] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.367] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.367] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.367] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.367] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.367] lstrcpynW (in: lpString1=0x432ea0, lpString2="l", iMaxLength=1024 | out: lpString1="l") returned="l" [0075.367] lstrlenW (lpString="l") returned 1 [0075.367] lstrcpynW (in: lpString1=0x40b5f0, lpString2="l", iMaxLength=1024 | out: lpString1="l") returned="l" [0075.367] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.367] lstrcmpiW (lpString1="l", lpString2="^") returned 1 [0075.367] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.367] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.367] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.367] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.367] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.368] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.368] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.368] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.368] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFi", iMaxLength=1024 | out: lpString1="KERNEL32::SetFi") returned="KERNEL32::SetFi" [0075.368] lstrlenW (lpString="KERNEL32::SetFi") returned 15 [0075.368] lstrcpynW (in: lpString1=0x432ebe, lpString2="l", iMaxLength=1024 | out: lpString1="l") returned="l" [0075.368] lstrlenW (lpString="l") returned 1 [0075.368] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFil", iMaxLength=1024 | out: lpString1="KERNEL32::SetFil") returned="KERNEL32::SetFil" [0075.368] lstrlenW (lpString="KERNEL32::SetFil") returned 16 [0075.368] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFil", iMaxLength=1024 | out: lpString1="KERNEL32::SetFil") returned="KERNEL32::SetFil" [0075.368] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.368] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.368] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.368] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.368] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.368] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.369] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.369] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.369] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.369] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.369] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.369] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.369] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.369] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.369] lstrlenW (lpString="C:\\Windows") returned 10 [0075.369] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.369] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.369] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.369] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.369] lstrlenW (lpString="524386") returned 6 [0075.369] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.370] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.370] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.370] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.370] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.370] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.370] lstrlenW (lpString="6") returned 1 [0075.370] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.370] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.370] lstrlenW (lpString="8") returned 1 [0075.370] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.370] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.370] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.370] lstrlenW (lpString="Execute: ") returned 9 [0075.370] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.370] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.370] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.370] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x32 [0075.371] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x32 [0075.371] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x32, lParam=0x0) returned 0x1 [0075.371] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.371] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.371] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.371] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.371] lstrcpynW (in: lpString1=0x432ea0, lpString2="296", iMaxLength=1024 | out: lpString1="296") returned="296" [0075.371] lstrlenW (lpString="296") returned 3 [0075.371] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="304") returned 3 [0075.371] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.371] lstrlenW (lpString="") returned 0 [0075.372] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.372] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.372] lstrcpynW (in: lpString1=0x432ea0, lpString2="304", iMaxLength=1024 | out: lpString1="304") returned="304" [0075.372] lstrlenW (lpString="304") returned 3 [0075.372] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0075.372] lstrlenW (lpString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returned 1023 [0075.372] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.372] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.372] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.372] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.372] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.372] lstrcpynW (in: lpString1=0x432ea4, lpString2="90D81AF5", iMaxLength=1024 | out: lpString1="90D81AF5") returned="90D81AF5" [0075.372] lstrlenW (lpString="90D81AF5") returned 8 [0075.372] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1699770217") returned 10 [0075.372] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.372] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.372] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.372] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.373] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.373] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.373] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.373] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.373] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.373] lstrcpynW (in: lpString1=0x432ea0, lpString2="1699770217", iMaxLength=1024 | out: lpString1="1699770217") returned="1699770217" [0075.373] lstrlenW (lpString="1699770217") returned 10 [0075.373] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="65506F69") returned 8 [0075.373] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.373] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.373] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.373] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.374] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.374] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.374] lstrlenW (lpString="0") returned 1 [0075.374] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.374] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.374] lstrlenW (lpString="0") returned 1 [0075.374] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.374] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.374] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.374] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.374] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.374] lstrlenW (lpString="0") returned 1 [0075.374] lstrcpynW (in: lpString1=0x432ea0, lpString2="65506F69", iMaxLength=1024 | out: lpString1="65506F69") returned="65506F69" [0075.374] lstrlenW (lpString="65506F69") returned 8 [0075.374] lstrcpynW (in: lpString1=0x40a5f0, lpString2="65506F69", iMaxLength=1024 | out: lpString1="65506F69") returned="65506F69" [0075.374] lstrlenW (lpString="65506F69") returned 8 [0075.374] lstrcpynW (in: lpString1=0x46b000, lpString2="65506F69", iMaxLength=1024 | out: lpString1="65506F69") returned="65506F69" [0075.374] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.374] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.374] lstrlenW (lpString="") returned 0 [0075.374] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.374] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.374] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.374] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.374] lstrcpynW (in: lpString1=0x432ea4, lpString2="65", iMaxLength=1024 | out: lpString1="65") returned="65" [0075.374] lstrlenW (lpString="65") returned 2 [0075.374] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="e") returned 1 [0075.374] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.374] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.375] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.375] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.375] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.375] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.375] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.375] lstrcpynW (in: lpString1=0x432ea0, lpString2="e", iMaxLength=1024 | out: lpString1="e") returned="e" [0075.375] lstrlenW (lpString="e") returned 1 [0075.375] lstrcpynW (in: lpString1=0x40b5f0, lpString2="e", iMaxLength=1024 | out: lpString1="e") returned="e" [0075.375] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.375] lstrcmpiW (lpString1="e", lpString2="^") returned 1 [0075.375] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.375] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.375] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.375] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.375] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.376] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.376] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.376] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.376] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFil", iMaxLength=1024 | out: lpString1="KERNEL32::SetFil") returned="KERNEL32::SetFil" [0075.376] lstrlenW (lpString="KERNEL32::SetFil") returned 16 [0075.376] lstrcpynW (in: lpString1=0x432ec0, lpString2="e", iMaxLength=1024 | out: lpString1="e") returned="e" [0075.376] lstrlenW (lpString="e") returned 1 [0075.376] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFile", iMaxLength=1024 | out: lpString1="KERNEL32::SetFile") returned="KERNEL32::SetFile" [0075.376] lstrlenW (lpString="KERNEL32::SetFile") returned 17 [0075.376] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFile", iMaxLength=1024 | out: lpString1="KERNEL32::SetFile") returned="KERNEL32::SetFile" [0075.376] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.376] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.376] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.376] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.376] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.376] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.377] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.377] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.377] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.377] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.377] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.377] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.377] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.377] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.377] lstrlenW (lpString="C:\\Windows") returned 10 [0075.377] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.377] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.377] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.377] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.377] lstrlenW (lpString="524386") returned 6 [0075.378] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.378] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.378] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.378] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.378] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.378] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.378] lstrlenW (lpString="0") returned 1 [0075.378] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.378] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.378] lstrlenW (lpString="2") returned 1 [0075.378] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.378] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.378] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.378] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.378] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.378] lstrlenW (lpString="2") returned 1 [0075.378] lstrcpynW (in: lpString1=0x432ea0, lpString2="65506F69", iMaxLength=1024 | out: lpString1="65506F69") returned="65506F69" [0075.378] lstrlenW (lpString="65506F69") returned 8 [0075.378] lstrcpynW (in: lpString1=0x40a5f0, lpString2="65506F69", iMaxLength=1024 | out: lpString1="65506F69") returned="65506F69" [0075.378] lstrlenW (lpString="65506F69") returned 8 [0075.378] lstrcpynW (in: lpString1=0x46b000, lpString2="506F69", iMaxLength=1024 | out: lpString1="506F69") returned="506F69" [0075.378] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.378] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.378] lstrlenW (lpString="") returned 0 [0075.378] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.378] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.378] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.378] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.378] lstrcpynW (in: lpString1=0x432ea4, lpString2="50", iMaxLength=1024 | out: lpString1="50") returned="50" [0075.378] lstrlenW (lpString="50") returned 2 [0075.379] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="P") returned 1 [0075.379] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.379] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.379] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.379] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.379] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.379] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.379] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.379] lstrcpynW (in: lpString1=0x432ea0, lpString2="P", iMaxLength=1024 | out: lpString1="P") returned="P" [0075.379] lstrlenW (lpString="P") returned 1 [0075.379] lstrcpynW (in: lpString1=0x40b5f0, lpString2="P", iMaxLength=1024 | out: lpString1="P") returned="P" [0075.379] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.379] lstrcmpiW (lpString1="P", lpString2="^") returned 1 [0075.379] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.379] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.379] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.379] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.379] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.380] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.380] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.380] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.380] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFile", iMaxLength=1024 | out: lpString1="KERNEL32::SetFile") returned="KERNEL32::SetFile" [0075.380] lstrlenW (lpString="KERNEL32::SetFile") returned 17 [0075.380] lstrcpynW (in: lpString1=0x432ec2, lpString2="P", iMaxLength=1024 | out: lpString1="P") returned="P" [0075.380] lstrlenW (lpString="P") returned 1 [0075.380] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFileP", iMaxLength=1024 | out: lpString1="KERNEL32::SetFileP") returned="KERNEL32::SetFileP" [0075.380] lstrlenW (lpString="KERNEL32::SetFileP") returned 18 [0075.380] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFileP", iMaxLength=1024 | out: lpString1="KERNEL32::SetFileP") returned="KERNEL32::SetFileP" [0075.380] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.380] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.380] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.380] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.380] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.380] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.380] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.381] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.381] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.381] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.381] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.381] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.381] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.381] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.381] lstrlenW (lpString="C:\\Windows") returned 10 [0075.381] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.381] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.381] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.381] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.381] lstrlenW (lpString="524386") returned 6 [0075.382] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.382] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.382] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.382] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.382] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.382] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.382] lstrlenW (lpString="2") returned 1 [0075.382] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.382] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.382] lstrlenW (lpString="4") returned 1 [0075.382] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.382] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.382] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.382] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.382] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.382] lstrlenW (lpString="4") returned 1 [0075.382] lstrcpynW (in: lpString1=0x432ea0, lpString2="65506F69", iMaxLength=1024 | out: lpString1="65506F69") returned="65506F69" [0075.382] lstrlenW (lpString="65506F69") returned 8 [0075.382] lstrcpynW (in: lpString1=0x40a5f0, lpString2="65506F69", iMaxLength=1024 | out: lpString1="65506F69") returned="65506F69" [0075.382] lstrlenW (lpString="65506F69") returned 8 [0075.382] lstrcpynW (in: lpString1=0x46b000, lpString2="6F69", iMaxLength=1024 | out: lpString1="6F69") returned="6F69" [0075.382] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.382] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.382] lstrlenW (lpString="") returned 0 [0075.382] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.382] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.383] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.383] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.383] lstrcpynW (in: lpString1=0x432ea4, lpString2="6F", iMaxLength=1024 | out: lpString1="6F") returned="6F" [0075.383] lstrlenW (lpString="6F") returned 2 [0075.383] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="o") returned 1 [0075.383] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.383] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.383] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.383] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.383] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.383] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.383] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.383] lstrcpynW (in: lpString1=0x432ea0, lpString2="o", iMaxLength=1024 | out: lpString1="o") returned="o" [0075.384] lstrlenW (lpString="o") returned 1 [0075.384] lstrcpynW (in: lpString1=0x40b5f0, lpString2="o", iMaxLength=1024 | out: lpString1="o") returned="o" [0075.384] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.384] lstrcmpiW (lpString1="o", lpString2="^") returned 1 [0075.384] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.384] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.384] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.384] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.384] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.384] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.384] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.384] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.384] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFileP", iMaxLength=1024 | out: lpString1="KERNEL32::SetFileP") returned="KERNEL32::SetFileP" [0075.384] lstrlenW (lpString="KERNEL32::SetFileP") returned 18 [0075.384] lstrcpynW (in: lpString1=0x432ec4, lpString2="o", iMaxLength=1024 | out: lpString1="o") returned="o" [0075.385] lstrlenW (lpString="o") returned 1 [0075.385] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePo", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePo") returned="KERNEL32::SetFilePo" [0075.385] lstrlenW (lpString="KERNEL32::SetFilePo") returned 19 [0075.385] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePo", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePo") returned="KERNEL32::SetFilePo" [0075.385] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.385] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.385] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.385] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.385] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.385] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.385] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.385] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.385] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.385] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.385] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.386] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.386] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.386] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.386] lstrlenW (lpString="C:\\Windows") returned 10 [0075.386] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.386] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.386] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.386] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.386] lstrlenW (lpString="524386") returned 6 [0075.386] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.386] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.386] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.386] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.386] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.387] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.387] lstrlenW (lpString="4") returned 1 [0075.387] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.387] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.387] lstrlenW (lpString="6") returned 1 [0075.387] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.387] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.387] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.387] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.387] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.387] lstrlenW (lpString="6") returned 1 [0075.387] lstrcpynW (in: lpString1=0x432ea0, lpString2="65506F69", iMaxLength=1024 | out: lpString1="65506F69") returned="65506F69" [0075.387] lstrlenW (lpString="65506F69") returned 8 [0075.387] lstrcpynW (in: lpString1=0x40a5f0, lpString2="65506F69", iMaxLength=1024 | out: lpString1="65506F69") returned="65506F69" [0075.387] lstrlenW (lpString="65506F69") returned 8 [0075.387] lstrcpynW (in: lpString1=0x46b000, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0075.387] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.387] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.387] lstrlenW (lpString="") returned 0 [0075.387] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.387] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.387] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.387] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.387] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0075.387] lstrlenW (lpString="69") returned 2 [0075.388] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0075.388] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.388] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.388] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.388] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.388] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.388] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.388] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.388] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.388] lstrlenW (lpString="i") returned 1 [0075.388] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.388] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.388] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0075.388] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.388] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.388] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.388] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.389] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.389] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.389] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.389] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.389] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePo", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePo") returned="KERNEL32::SetFilePo" [0075.389] lstrlenW (lpString="KERNEL32::SetFilePo") returned 19 [0075.389] lstrcpynW (in: lpString1=0x432ec6, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.389] lstrlenW (lpString="i") returned 1 [0075.389] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePoi", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePoi") returned="KERNEL32::SetFilePoi" [0075.389] lstrlenW (lpString="KERNEL32::SetFilePoi") returned 20 [0075.389] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePoi", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePoi") returned="KERNEL32::SetFilePoi" [0075.389] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.389] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.389] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.389] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.390] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.390] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.390] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.390] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.390] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.390] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.390] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.390] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.390] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.390] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.390] lstrlenW (lpString="C:\\Windows") returned 10 [0075.390] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.391] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.391] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.391] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.391] lstrlenW (lpString="524386") returned 6 [0075.391] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.391] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.391] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.391] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.391] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.391] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.391] lstrlenW (lpString="6") returned 1 [0075.391] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.391] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.391] lstrlenW (lpString="8") returned 1 [0075.391] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.391] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.391] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.391] lstrlenW (lpString="Execute: ") returned 9 [0075.391] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.392] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.392] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.392] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x33 [0075.392] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x33 [0075.393] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x33, lParam=0x0) returned 0x1 [0075.393] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.393] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.393] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.393] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.393] lstrcpynW (in: lpString1=0x432ea0, lpString2="304", iMaxLength=1024 | out: lpString1="304") returned="304" [0075.393] lstrlenW (lpString="304") returned 3 [0075.393] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="312") returned 3 [0075.393] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.394] lstrlenW (lpString="") returned 0 [0075.394] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.394] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.394] lstrcpynW (in: lpString1=0x432ea0, lpString2="312", iMaxLength=1024 | out: lpString1="312") returned="312" [0075.394] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.394] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.394] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.394] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.394] lstrcpynW (in: lpString1=0x432ea4, lpString2="9BFC10EE", iMaxLength=1024 | out: lpString1="9BFC10EE") returned="9BFC10EE" [0075.394] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1853121906") returned 10 [0075.394] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.394] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.394] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.395] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.395] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.395] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.395] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.395] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.395] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.395] lstrcpynW (in: lpString1=0x432ea0, lpString2="1853121906", iMaxLength=1024 | out: lpString1="1853121906") returned="1853121906" [0075.395] lstrlenW (lpString="1853121906") returned 10 [0075.395] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="6E746572") returned 8 [0075.395] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.395] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.395] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.396] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.396] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.396] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.396] lstrlenW (lpString="0") returned 1 [0075.396] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.396] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.396] lstrlenW (lpString="0") returned 1 [0075.396] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.396] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.396] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.396] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.396] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.396] lstrlenW (lpString="0") returned 1 [0075.396] lstrcpynW (in: lpString1=0x432ea0, lpString2="6E746572", iMaxLength=1024 | out: lpString1="6E746572") returned="6E746572" [0075.396] lstrlenW (lpString="6E746572") returned 8 [0075.396] lstrcpynW (in: lpString1=0x40a5f0, lpString2="6E746572", iMaxLength=1024 | out: lpString1="6E746572") returned="6E746572" [0075.396] lstrlenW (lpString="6E746572") returned 8 [0075.396] lstrcpynW (in: lpString1=0x46b000, lpString2="6E746572", iMaxLength=1024 | out: lpString1="6E746572") returned="6E746572" [0075.396] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.396] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.396] lstrlenW (lpString="") returned 0 [0075.396] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.396] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.396] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.396] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.396] lstrcpynW (in: lpString1=0x432ea4, lpString2="6E", iMaxLength=1024 | out: lpString1="6E") returned="6E" [0075.397] lstrlenW (lpString="6E") returned 2 [0075.397] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="n") returned 1 [0075.397] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.397] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.397] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.397] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.397] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.397] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.397] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.397] lstrcpynW (in: lpString1=0x432ea0, lpString2="n", iMaxLength=1024 | out: lpString1="n") returned="n" [0075.397] lstrlenW (lpString="n") returned 1 [0075.397] lstrcpynW (in: lpString1=0x40b5f0, lpString2="n", iMaxLength=1024 | out: lpString1="n") returned="n" [0075.397] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.397] lstrcmpiW (lpString1="n", lpString2="^") returned 1 [0075.397] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.397] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.397] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.397] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.398] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.398] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.398] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.398] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.398] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePoi", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePoi") returned="KERNEL32::SetFilePoi" [0075.398] lstrlenW (lpString="KERNEL32::SetFilePoi") returned 20 [0075.398] lstrcpynW (in: lpString1=0x432ec8, lpString2="n", iMaxLength=1024 | out: lpString1="n") returned="n" [0075.398] lstrlenW (lpString="n") returned 1 [0075.398] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePoin", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePoin") returned="KERNEL32::SetFilePoin" [0075.398] lstrlenW (lpString="KERNEL32::SetFilePoin") returned 21 [0075.398] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePoin", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePoin") returned="KERNEL32::SetFilePoin" [0075.398] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.398] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.398] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.398] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.398] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.399] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.399] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.399] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.399] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.399] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.399] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.399] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.399] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.399] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.399] lstrlenW (lpString="C:\\Windows") returned 10 [0075.399] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.400] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.400] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.400] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.400] lstrlenW (lpString="524386") returned 6 [0075.400] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.400] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.400] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.400] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.400] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.400] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.400] lstrlenW (lpString="0") returned 1 [0075.400] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.400] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.400] lstrlenW (lpString="2") returned 1 [0075.400] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.400] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.400] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.400] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.400] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.400] lstrlenW (lpString="2") returned 1 [0075.400] lstrcpynW (in: lpString1=0x432ea0, lpString2="6E746572", iMaxLength=1024 | out: lpString1="6E746572") returned="6E746572" [0075.400] lstrlenW (lpString="6E746572") returned 8 [0075.400] lstrcpynW (in: lpString1=0x40a5f0, lpString2="6E746572", iMaxLength=1024 | out: lpString1="6E746572") returned="6E746572" [0075.401] lstrlenW (lpString="6E746572") returned 8 [0075.401] lstrcpynW (in: lpString1=0x46b000, lpString2="746572", iMaxLength=1024 | out: lpString1="746572") returned="746572" [0075.401] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.401] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.401] lstrlenW (lpString="") returned 0 [0075.401] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.401] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.401] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.401] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.401] lstrcpynW (in: lpString1=0x432ea4, lpString2="74", iMaxLength=1024 | out: lpString1="74") returned="74" [0075.401] lstrlenW (lpString="74") returned 2 [0075.401] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="t") returned 1 [0075.401] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.401] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.401] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.401] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.401] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.401] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.401] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.401] lstrcpynW (in: lpString1=0x432ea0, lpString2="t", iMaxLength=1024 | out: lpString1="t") returned="t" [0075.401] lstrlenW (lpString="t") returned 1 [0075.401] lstrcpynW (in: lpString1=0x40b5f0, lpString2="t", iMaxLength=1024 | out: lpString1="t") returned="t" [0075.401] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.401] lstrcmpiW (lpString1="t", lpString2="^") returned 1 [0075.402] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.402] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.402] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.402] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.402] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.402] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.402] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.402] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.402] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePoin", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePoin") returned="KERNEL32::SetFilePoin" [0075.402] lstrlenW (lpString="KERNEL32::SetFilePoin") returned 21 [0075.402] lstrcpynW (in: lpString1=0x432eca, lpString2="t", iMaxLength=1024 | out: lpString1="t") returned="t" [0075.402] lstrlenW (lpString="t") returned 1 [0075.402] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePoint", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePoint") returned="KERNEL32::SetFilePoint" [0075.402] lstrlenW (lpString="KERNEL32::SetFilePoint") returned 22 [0075.402] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePoint", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePoint") returned="KERNEL32::SetFilePoint" [0075.402] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.403] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.403] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.403] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.403] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.403] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.403] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.403] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.403] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.403] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.403] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.403] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.403] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.404] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.404] lstrlenW (lpString="C:\\Windows") returned 10 [0075.404] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.404] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.404] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.404] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.404] lstrlenW (lpString="524386") returned 6 [0075.404] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.404] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.404] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.404] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.404] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.404] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.404] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.404] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.404] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.404] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.404] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.404] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="e") returned 1 [0075.404] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.405] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.405] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.405] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.405] lstrcmpiW (lpString1="e", lpString2="^") returned 1 [0075.405] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.405] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.405] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.405] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.405] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.405] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.405] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.405] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.406] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePoint", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePoint") returned="KERNEL32::SetFilePoint" [0075.406] lstrlenW (lpString="KERNEL32::SetFilePoint") returned 22 [0075.406] lstrcpynW (in: lpString1=0x432ecc, lpString2="e", iMaxLength=1024 | out: lpString1="e") returned="e" [0075.406] lstrlenW (lpString="e") returned 1 [0075.406] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointe", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointe") returned="KERNEL32::SetFilePointe" [0075.406] lstrlenW (lpString="KERNEL32::SetFilePointe") returned 23 [0075.406] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointe", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointe") returned="KERNEL32::SetFilePointe" [0075.406] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.406] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.406] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.406] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.406] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.406] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.406] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.406] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.406] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.406] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.407] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.407] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.407] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.407] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.407] lstrlenW (lpString="C:\\Windows") returned 10 [0075.407] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.407] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.407] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.407] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.407] lstrlenW (lpString="524386") returned 6 [0075.407] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.407] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.407] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.407] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.407] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.407] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.408] lstrlenW (lpString="4") returned 1 [0075.408] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.408] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.408] lstrlenW (lpString="6") returned 1 [0075.408] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.408] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.408] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.408] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.408] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.408] lstrlenW (lpString="6") returned 1 [0075.408] lstrcpynW (in: lpString1=0x432ea0, lpString2="6E746572", iMaxLength=1024 | out: lpString1="6E746572") returned="6E746572" [0075.408] lstrlenW (lpString="6E746572") returned 8 [0075.408] lstrcpynW (in: lpString1=0x40a5f0, lpString2="6E746572", iMaxLength=1024 | out: lpString1="6E746572") returned="6E746572" [0075.408] lstrlenW (lpString="6E746572") returned 8 [0075.408] lstrcpynW (in: lpString1=0x46b000, lpString2="72", iMaxLength=1024 | out: lpString1="72") returned="72" [0075.408] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.408] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.408] lstrlenW (lpString="") returned 0 [0075.408] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.408] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.408] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.408] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.408] lstrcpynW (in: lpString1=0x432ea4, lpString2="72", iMaxLength=1024 | out: lpString1="72") returned="72" [0075.408] lstrlenW (lpString="72") returned 2 [0075.408] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="r") returned 1 [0075.408] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.408] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.408] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.409] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.409] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.409] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.409] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.409] lstrcpynW (in: lpString1=0x432ea0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0075.409] lstrlenW (lpString="r") returned 1 [0075.409] lstrcpynW (in: lpString1=0x40b5f0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0075.409] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.409] lstrcmpiW (lpString1="r", lpString2="^") returned 1 [0075.409] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.409] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.409] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.409] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.409] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.409] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.410] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.410] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.410] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointe", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointe") returned="KERNEL32::SetFilePointe" [0075.410] lstrlenW (lpString="KERNEL32::SetFilePointe") returned 23 [0075.410] lstrcpynW (in: lpString1=0x432ece, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0075.410] lstrlenW (lpString="r") returned 1 [0075.410] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointer", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer") returned="KERNEL32::SetFilePointer" [0075.410] lstrlenW (lpString="KERNEL32::SetFilePointer") returned 24 [0075.410] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointer", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer") returned="KERNEL32::SetFilePointer" [0075.410] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.410] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.410] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.410] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.410] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.410] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.410] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.410] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.411] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.411] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.411] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.411] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.411] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.411] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.411] lstrlenW (lpString="C:\\Windows") returned 10 [0075.411] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.411] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.411] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.411] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.411] lstrlenW (lpString="524386") returned 6 [0075.411] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.411] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.412] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.412] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.412] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.412] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.412] lstrlenW (lpString="6") returned 1 [0075.412] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.412] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.412] lstrlenW (lpString="8") returned 1 [0075.412] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.412] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.412] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.412] lstrlenW (lpString="Execute: ") returned 9 [0075.412] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.412] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.412] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.412] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x34 [0075.413] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x34 [0075.413] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x34, lParam=0x0) returned 0x1 [0075.413] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.413] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.413] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.413] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.414] lstrcpynW (in: lpString1=0x432ea0, lpString2="312", iMaxLength=1024 | out: lpString1="312") returned="312" [0075.414] lstrlenW (lpString="312") returned 3 [0075.414] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="320") returned 3 [0075.414] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.414] lstrlenW (lpString="") returned 0 [0075.414] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.414] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.414] lstrcpynW (in: lpString1=0x432ea0, lpString2="320", iMaxLength=1024 | out: lpString1="320") returned="320" [0075.414] lstrlenW (lpString="320") returned 3 [0075.414] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0075.414] lstrlenW (lpString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returned 1023 [0075.414] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.414] lstrcpynW (in: lpString1=0x46d000, lpString2="DDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.414] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.415] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.415] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.415] lstrcpynW (in: lpString1=0x432ea4, lpString2="DDE155EE", iMaxLength=1024 | out: lpString1="DDE155EE") returned="DDE155EE" [0075.415] lstrlenW (lpString="DDE155EE") returned 8 [0075.415] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="677978226") returned 9 [0075.415] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.415] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.415] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.415] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.415] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.415] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.415] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.415] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.415] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.415] lstrcpynW (in: lpString1=0x432ea0, lpString2="677978226", iMaxLength=1024 | out: lpString1="677978226") returned="677978226" [0075.416] lstrlenW (lpString="677978226") returned 9 [0075.416] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="28692072") returned 8 [0075.416] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.416] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.416] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.416] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.416] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.416] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.416] lstrlenW (lpString="0") returned 1 [0075.416] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.416] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.416] lstrlenW (lpString="0") returned 1 [0075.416] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.416] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.416] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.416] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.416] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.416] lstrlenW (lpString="0") returned 1 [0075.416] lstrcpynW (in: lpString1=0x432ea0, lpString2="28692072", iMaxLength=1024 | out: lpString1="28692072") returned="28692072" [0075.416] lstrlenW (lpString="28692072") returned 8 [0075.416] lstrcpynW (in: lpString1=0x40a5f0, lpString2="28692072", iMaxLength=1024 | out: lpString1="28692072") returned="28692072" [0075.416] lstrlenW (lpString="28692072") returned 8 [0075.416] lstrcpynW (in: lpString1=0x46b000, lpString2="28692072", iMaxLength=1024 | out: lpString1="28692072") returned="28692072" [0075.417] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.417] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.417] lstrlenW (lpString="") returned 0 [0075.417] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.417] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.417] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.417] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.417] lstrcpynW (in: lpString1=0x432ea4, lpString2="28", iMaxLength=1024 | out: lpString1="28") returned="28" [0075.417] lstrlenW (lpString="28") returned 2 [0075.417] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="(") returned 1 [0075.417] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.417] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.417] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.417] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.417] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.417] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.417] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.417] lstrcpynW (in: lpString1=0x432ea0, lpString2="(", iMaxLength=1024 | out: lpString1="(") returned="(" [0075.417] lstrlenW (lpString="(") returned 1 [0075.417] lstrcpynW (in: lpString1=0x40b5f0, lpString2="(", iMaxLength=1024 | out: lpString1="(") returned="(" [0075.417] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.417] lstrcmpiW (lpString1="(", lpString2="^") returned -1 [0075.417] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.418] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.418] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.418] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.418] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.418] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.418] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.418] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.418] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointer", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer") returned="KERNEL32::SetFilePointer" [0075.418] lstrlenW (lpString="KERNEL32::SetFilePointer") returned 24 [0075.418] lstrcpynW (in: lpString1=0x432ed0, lpString2="(", iMaxLength=1024 | out: lpString1="(") returned="(" [0075.418] lstrlenW (lpString="(") returned 1 [0075.418] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointer(", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(") returned="KERNEL32::SetFilePointer(" [0075.418] lstrlenW (lpString="KERNEL32::SetFilePointer(") returned 25 [0075.418] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointer(", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(") returned="KERNEL32::SetFilePointer(" [0075.418] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.418] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.418] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.419] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.419] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.419] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.419] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.419] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.419] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.419] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.419] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.419] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.419] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.419] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.419] lstrlenW (lpString="C:\\Windows") returned 10 [0075.420] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.420] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.420] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.420] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.420] lstrlenW (lpString="524386") returned 6 [0075.420] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.420] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.420] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.420] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.420] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.420] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.420] lstrlenW (lpString="0") returned 1 [0075.420] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.420] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.420] lstrlenW (lpString="2") returned 1 [0075.420] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.420] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.420] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.420] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.420] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.420] lstrlenW (lpString="2") returned 1 [0075.420] lstrcpynW (in: lpString1=0x432ea0, lpString2="28692072", iMaxLength=1024 | out: lpString1="28692072") returned="28692072" [0075.420] lstrlenW (lpString="28692072") returned 8 [0075.420] lstrcpynW (in: lpString1=0x40a5f0, lpString2="28692072", iMaxLength=1024 | out: lpString1="28692072") returned="28692072" [0075.421] lstrlenW (lpString="28692072") returned 8 [0075.421] lstrcpynW (in: lpString1=0x46b000, lpString2="692072", iMaxLength=1024 | out: lpString1="692072") returned="692072" [0075.421] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.421] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.421] lstrlenW (lpString="") returned 0 [0075.421] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.421] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.421] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.421] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.421] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0075.421] lstrlenW (lpString="69") returned 2 [0075.421] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0075.421] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.421] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.421] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.421] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.421] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.421] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.421] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.421] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.421] lstrlenW (lpString="i") returned 1 [0075.421] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.421] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.421] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0075.421] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.422] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.422] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.422] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.422] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.422] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.423] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.423] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.423] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointer(", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(") returned="KERNEL32::SetFilePointer(" [0075.423] lstrlenW (lpString="KERNEL32::SetFilePointer(") returned 25 [0075.423] lstrcpynW (in: lpString1=0x432ed2, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.423] lstrlenW (lpString="i") returned 1 [0075.423] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointer(i", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i") returned="KERNEL32::SetFilePointer(i" [0075.423] lstrlenW (lpString="KERNEL32::SetFilePointer(i") returned 26 [0075.423] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointer(i", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i") returned="KERNEL32::SetFilePointer(i" [0075.423] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.423] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.423] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.423] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.423] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.423] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.424] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.424] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.424] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.424] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.424] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.424] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.424] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.424] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.424] lstrlenW (lpString="C:\\Windows") returned 10 [0075.424] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.424] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.424] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.424] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.424] lstrlenW (lpString="524386") returned 6 [0075.425] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.425] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.425] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.425] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.425] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.425] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.425] lstrlenW (lpString="2") returned 1 [0075.425] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.425] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.425] lstrlenW (lpString="4") returned 1 [0075.425] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.425] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.425] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.425] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.425] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.425] lstrlenW (lpString="4") returned 1 [0075.425] lstrcpynW (in: lpString1=0x432ea0, lpString2="28692072", iMaxLength=1024 | out: lpString1="28692072") returned="28692072" [0075.425] lstrlenW (lpString="28692072") returned 8 [0075.425] lstrcpynW (in: lpString1=0x40a5f0, lpString2="28692072", iMaxLength=1024 | out: lpString1="28692072") returned="28692072" [0075.425] lstrlenW (lpString="28692072") returned 8 [0075.425] lstrcpynW (in: lpString1=0x46b000, lpString2="2072", iMaxLength=1024 | out: lpString1="2072") returned="2072" [0075.425] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.425] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.425] lstrlenW (lpString="") returned 0 [0075.425] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.425] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.425] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.425] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.426] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0075.426] lstrlenW (lpString="20") returned 2 [0075.426] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0075.426] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.426] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.426] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.426] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.426] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.426] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.426] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.426] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.426] lstrlenW (lpString=" ") returned 1 [0075.426] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.426] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.426] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0075.426] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.426] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.426] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.426] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.427] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.427] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.427] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.427] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.427] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointer(i", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i") returned="KERNEL32::SetFilePointer(i" [0075.427] lstrlenW (lpString="KERNEL32::SetFilePointer(i") returned 26 [0075.427] lstrcpynW (in: lpString1=0x432ed4, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.427] lstrlenW (lpString=" ") returned 1 [0075.427] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointer(i ", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i ") returned="KERNEL32::SetFilePointer(i " [0075.427] lstrlenW (lpString="KERNEL32::SetFilePointer(i ") returned 27 [0075.427] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointer(i ", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i ") returned="KERNEL32::SetFilePointer(i " [0075.427] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.427] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.427] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.427] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.427] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.427] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.428] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.428] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.428] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.428] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.428] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.428] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.428] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.428] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.428] lstrlenW (lpString="C:\\Windows") returned 10 [0075.428] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.428] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.428] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.429] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.429] lstrlenW (lpString="524386") returned 6 [0075.429] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.429] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.429] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.429] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.429] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.429] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.429] lstrlenW (lpString="4") returned 1 [0075.429] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.429] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.429] lstrlenW (lpString="6") returned 1 [0075.429] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.429] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.429] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.429] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.429] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.429] lstrlenW (lpString="6") returned 1 [0075.429] lstrcpynW (in: lpString1=0x432ea0, lpString2="28692072", iMaxLength=1024 | out: lpString1="28692072") returned="28692072" [0075.429] lstrlenW (lpString="28692072") returned 8 [0075.429] lstrcpynW (in: lpString1=0x40a5f0, lpString2="28692072", iMaxLength=1024 | out: lpString1="28692072") returned="28692072" [0075.429] lstrlenW (lpString="28692072") returned 8 [0075.429] lstrcpynW (in: lpString1=0x46b000, lpString2="72", iMaxLength=1024 | out: lpString1="72") returned="72" [0075.429] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.429] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.429] lstrlenW (lpString="") returned 0 [0075.429] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.429] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.429] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.430] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.430] lstrcpynW (in: lpString1=0x432ea4, lpString2="72", iMaxLength=1024 | out: lpString1="72") returned="72" [0075.430] lstrlenW (lpString="72") returned 2 [0075.430] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="r") returned 1 [0075.430] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.430] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.430] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.431] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.431] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.431] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.431] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.431] lstrcpynW (in: lpString1=0x432ea0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0075.431] lstrlenW (lpString="r") returned 1 [0075.431] lstrcpynW (in: lpString1=0x40b5f0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0075.431] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.431] lstrcmpiW (lpString1="r", lpString2="^") returned 1 [0075.431] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.432] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.432] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.432] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.432] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.432] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.432] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.432] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.432] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointer(i ", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i ") returned="KERNEL32::SetFilePointer(i " [0075.432] lstrlenW (lpString="KERNEL32::SetFilePointer(i ") returned 27 [0075.432] lstrcpynW (in: lpString1=0x432ed6, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0075.432] lstrlenW (lpString="r") returned 1 [0075.432] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointer(i r", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r") returned="KERNEL32::SetFilePointer(i r" [0075.432] lstrlenW (lpString="KERNEL32::SetFilePointer(i r") returned 28 [0075.432] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointer(i r", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r") returned="KERNEL32::SetFilePointer(i r" [0075.432] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.432] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.432] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.433] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.433] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.433] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.433] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.433] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.433] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.433] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.433] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.433] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.433] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.433] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.433] lstrlenW (lpString="C:\\Windows") returned 10 [0075.434] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.434] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.434] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.434] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.434] lstrlenW (lpString="524386") returned 6 [0075.434] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.434] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.434] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.434] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.434] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.434] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.434] lstrlenW (lpString="6") returned 1 [0075.434] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.434] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.434] lstrlenW (lpString="8") returned 1 [0075.434] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.434] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.434] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.434] lstrlenW (lpString="Execute: ") returned 9 [0075.434] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.434] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.434] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.435] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x35 [0075.435] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x35 [0075.435] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x35, lParam=0x0) returned 0x1 [0075.435] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.436] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.436] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.436] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.436] lstrcpynW (in: lpString1=0x432ea0, lpString2="320", iMaxLength=1024 | out: lpString1="320") returned="320" [0075.436] lstrlenW (lpString="320") returned 3 [0075.436] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="328") returned 3 [0075.436] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.436] lstrlenW (lpString="") returned 0 [0075.436] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.436] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.436] lstrcpynW (in: lpString1=0x432ea0, lpString2="328", iMaxLength=1024 | out: lpString1="328") returned="328" [0075.436] lstrlenW (lpString="328") returned 3 [0075.436] lstrcpynW (in: lpString1=0x432ea0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrlenW (lpString="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned 1023 [0075.436] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrlenW (lpString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returned 1023 [0075.436] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.436] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.436] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.436] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.436] lstrcpynW (in: lpString1=0x432ea4, lpString2="C0A455F5", iMaxLength=1024 | out: lpString1="C0A455F5") returned="C0A455F5" [0075.437] lstrlenW (lpString="C0A455F5") returned 8 [0075.437] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="892084329") returned 9 [0075.437] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.437] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.437] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.437] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.437] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.437] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.437] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.437] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.437] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.437] lstrcpynW (in: lpString1=0x432ea0, lpString2="892084329", iMaxLength=1024 | out: lpString1="892084329") returned="892084329" [0075.437] lstrlenW (lpString="892084329") returned 9 [0075.437] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="352C2069") returned 8 [0075.437] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.437] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.437] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.438] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.438] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.438] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.438] lstrlenW (lpString="0") returned 1 [0075.438] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.438] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.438] lstrlenW (lpString="0") returned 1 [0075.438] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.438] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.438] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.438] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.438] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.438] lstrlenW (lpString="0") returned 1 [0075.438] lstrcpynW (in: lpString1=0x432ea0, lpString2="352C2069", iMaxLength=1024 | out: lpString1="352C2069") returned="352C2069" [0075.438] lstrlenW (lpString="352C2069") returned 8 [0075.438] lstrcpynW (in: lpString1=0x40a5f0, lpString2="352C2069", iMaxLength=1024 | out: lpString1="352C2069") returned="352C2069" [0075.438] lstrlenW (lpString="352C2069") returned 8 [0075.438] lstrcpynW (in: lpString1=0x46b000, lpString2="352C2069", iMaxLength=1024 | out: lpString1="352C2069") returned="352C2069" [0075.438] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.438] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.438] lstrlenW (lpString="") returned 0 [0075.438] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.438] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.438] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.438] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.438] lstrcpynW (in: lpString1=0x432ea4, lpString2="35", iMaxLength=1024 | out: lpString1="35") returned="35" [0075.438] lstrlenW (lpString="35") returned 2 [0075.438] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="5") returned 1 [0075.438] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.438] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.439] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.439] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.439] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.439] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.439] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.439] lstrcpynW (in: lpString1=0x432ea0, lpString2="5", iMaxLength=1024 | out: lpString1="5") returned="5" [0075.439] lstrlenW (lpString="5") returned 1 [0075.439] lstrcpynW (in: lpString1=0x40b5f0, lpString2="5", iMaxLength=1024 | out: lpString1="5") returned="5" [0075.439] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.439] lstrcmpiW (lpString1="5", lpString2="^") returned 1 [0075.439] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.439] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.439] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.439] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.439] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.439] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.440] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.440] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.440] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointer(i r", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r") returned="KERNEL32::SetFilePointer(i r" [0075.440] lstrlenW (lpString="KERNEL32::SetFilePointer(i r") returned 28 [0075.440] lstrcpynW (in: lpString1=0x432ed8, lpString2="5", iMaxLength=1024 | out: lpString1="5") returned="5" [0075.440] lstrlenW (lpString="5") returned 1 [0075.440] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointer(i r5", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5") returned="KERNEL32::SetFilePointer(i r5" [0075.440] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5") returned 29 [0075.440] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointer(i r5", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5") returned="KERNEL32::SetFilePointer(i r5" [0075.440] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.440] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.440] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.440] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.440] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.440] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.440] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.440] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.440] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.440] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.441] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.441] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.441] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.441] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.441] lstrlenW (lpString="C:\\Windows") returned 10 [0075.441] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.441] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.441] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.441] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.441] lstrlenW (lpString="524386") returned 6 [0075.441] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.441] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.441] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.441] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.441] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.441] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.441] lstrlenW (lpString="0") returned 1 [0075.441] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.441] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.441] lstrlenW (lpString="2") returned 1 [0075.441] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.441] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.442] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.442] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.442] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.442] lstrlenW (lpString="2") returned 1 [0075.442] lstrcpynW (in: lpString1=0x432ea0, lpString2="352C2069", iMaxLength=1024 | out: lpString1="352C2069") returned="352C2069" [0075.442] lstrlenW (lpString="352C2069") returned 8 [0075.442] lstrcpynW (in: lpString1=0x40a5f0, lpString2="352C2069", iMaxLength=1024 | out: lpString1="352C2069") returned="352C2069" [0075.442] lstrlenW (lpString="352C2069") returned 8 [0075.442] lstrcpynW (in: lpString1=0x46b000, lpString2="2C2069", iMaxLength=1024 | out: lpString1="2C2069") returned="2C2069" [0075.442] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.442] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.442] lstrlenW (lpString="") returned 0 [0075.442] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.442] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.442] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.442] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.442] lstrcpynW (in: lpString1=0x432ea4, lpString2="2C", iMaxLength=1024 | out: lpString1="2C") returned="2C" [0075.442] lstrlenW (lpString="2C") returned 2 [0075.442] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=",") returned 1 [0075.442] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.442] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.442] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.442] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.442] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.442] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.442] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.442] lstrcpynW (in: lpString1=0x432ea0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0075.443] lstrlenW (lpString=",") returned 1 [0075.443] lstrcpynW (in: lpString1=0x40b5f0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0075.443] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.443] lstrcmpiW (lpString1=",", lpString2="^") returned -1 [0075.443] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.443] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.443] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.443] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.443] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.443] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.443] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.443] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.443] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.443] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.443] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.443] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.444] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.444] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.444] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.444] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.444] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.444] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.444] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.444] lstrlenW (lpString="C:\\Windows") returned 10 [0075.444] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.444] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.444] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.444] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.444] lstrlenW (lpString="524386") returned 6 [0075.444] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.444] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.445] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.445] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.445] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.445] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.445] lstrlenW (lpString="2") returned 1 [0075.445] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.445] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.445] lstrlenW (lpString="4") returned 1 [0075.445] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.445] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.445] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.445] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.445] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.445] lstrlenW (lpString="4") returned 1 [0075.445] lstrcpynW (in: lpString1=0x432ea0, lpString2="352C2069", iMaxLength=1024 | out: lpString1="352C2069") returned="352C2069" [0075.445] lstrlenW (lpString="352C2069") returned 8 [0075.445] lstrcpynW (in: lpString1=0x40a5f0, lpString2="352C2069", iMaxLength=1024 | out: lpString1="352C2069") returned="352C2069" [0075.445] lstrlenW (lpString="352C2069") returned 8 [0075.445] lstrcpynW (in: lpString1=0x46b000, lpString2="2069", iMaxLength=1024 | out: lpString1="2069") returned="2069" [0075.445] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.445] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.445] lstrlenW (lpString="") returned 0 [0075.445] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.445] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.445] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.446] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.446] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0075.446] lstrlenW (lpString="20") returned 2 [0075.446] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0075.446] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.446] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.446] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.446] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.446] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.446] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.446] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.446] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.446] lstrlenW (lpString=" ") returned 1 [0075.446] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.446] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.446] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0075.446] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.446] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.446] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.447] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.447] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.447] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.447] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.447] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.447] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointer(i r5,", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5,") returned="KERNEL32::SetFilePointer(i r5," [0075.447] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5,") returned 30 [0075.447] lstrcpynW (in: lpString1=0x432edc, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.447] lstrlenW (lpString=" ") returned 1 [0075.447] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointer(i r5, ", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, ") returned="KERNEL32::SetFilePointer(i r5, " [0075.447] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, ") returned 31 [0075.447] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointer(i r5, ", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, ") returned="KERNEL32::SetFilePointer(i r5, " [0075.447] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.448] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.448] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.448] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.448] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.448] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.448] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.448] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.448] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.448] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.448] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.448] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.448] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.449] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.449] lstrlenW (lpString="C:\\Windows") returned 10 [0075.449] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.449] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.449] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.449] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.449] lstrlenW (lpString="524386") returned 6 [0075.449] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.449] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.449] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.449] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.449] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.449] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.449] lstrlenW (lpString="4") returned 1 [0075.449] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.449] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.449] lstrlenW (lpString="6") returned 1 [0075.449] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.449] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.449] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.449] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.449] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.449] lstrlenW (lpString="6") returned 1 [0075.449] lstrcpynW (in: lpString1=0x432ea0, lpString2="352C2069", iMaxLength=1024 | out: lpString1="352C2069") returned="352C2069" [0075.449] lstrlenW (lpString="352C2069") returned 8 [0075.449] lstrcpynW (in: lpString1=0x40a5f0, lpString2="352C2069", iMaxLength=1024 | out: lpString1="352C2069") returned="352C2069" [0075.450] lstrlenW (lpString="352C2069") returned 8 [0075.450] lstrcpynW (in: lpString1=0x46b000, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0075.450] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.450] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.450] lstrlenW (lpString="") returned 0 [0075.450] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.450] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.450] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.450] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.450] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0075.450] lstrlenW (lpString="69") returned 2 [0075.450] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0075.450] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.450] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.450] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.450] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.450] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.450] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.450] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.450] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.450] lstrlenW (lpString="i") returned 1 [0075.450] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.450] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.450] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0075.450] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.450] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.451] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.451] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.451] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.451] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.451] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.451] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.451] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointer(i r5, ", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, ") returned="KERNEL32::SetFilePointer(i r5, " [0075.451] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, ") returned 31 [0075.451] lstrcpynW (in: lpString1=0x432ede, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.451] lstrlenW (lpString="i") returned 1 [0075.451] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointer(i r5, i", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i") returned="KERNEL32::SetFilePointer(i r5, i" [0075.451] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i") returned 32 [0075.451] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointer(i r5, i", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i") returned="KERNEL32::SetFilePointer(i r5, i" [0075.451] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.452] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.452] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.452] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.452] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.452] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.452] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.452] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.452] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.452] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.452] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.452] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.452] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.452] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.452] lstrlenW (lpString="C:\\Windows") returned 10 [0075.453] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.453] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.453] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.453] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.453] lstrlenW (lpString="524386") returned 6 [0075.453] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.453] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.453] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.453] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.453] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.453] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.453] lstrlenW (lpString="6") returned 1 [0075.453] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.453] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.453] lstrlenW (lpString="8") returned 1 [0075.453] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.453] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.453] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.453] lstrlenW (lpString="Execute: ") returned 9 [0075.453] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.453] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.453] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.454] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x36 [0075.454] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x36 [0075.454] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x36, lParam=0x0) returned 0x1 [0075.454] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.454] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.454] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.455] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.455] lstrcpynW (in: lpString1=0x432ea0, lpString2="328", iMaxLength=1024 | out: lpString1="328") returned="328" [0075.455] lstrlenW (lpString="328") returned 3 [0075.455] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="336") returned 3 [0075.455] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.455] lstrlenW (lpString="") returned 0 [0075.455] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.455] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.455] lstrcpynW (in: lpString1=0x432ea0, lpString2="336", iMaxLength=1024 | out: lpString1="336") returned="336" [0075.455] lstrlenW (lpString="336") returned 3 [0075.455] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.455] lstrcpynW (in: lpString1=0x40a5f0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.455] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned="D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0075.455] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.455] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.455] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.455] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.455] lstrcpynW (in: lpString1=0x432ea4, lpString2="D5B943AC", iMaxLength=1024 | out: lpString1="D5B943AC") returned="D5B943AC" [0075.455] lstrlenW (lpString="D5B943AC") returned 8 [0075.455] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="540096048") returned 9 [0075.455] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.455] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.455] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.456] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.456] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.456] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.456] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.456] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.456] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.456] lstrcpynW (in: lpString1=0x432ea0, lpString2="540096048", iMaxLength=1024 | out: lpString1="540096048") returned="540096048" [0075.456] lstrlenW (lpString="540096048") returned 9 [0075.456] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="20313630") returned 8 [0075.456] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.456] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.456] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.456] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.456] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.456] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.456] lstrlenW (lpString="0") returned 1 [0075.457] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.457] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.457] lstrlenW (lpString="0") returned 1 [0075.457] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.457] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.457] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.457] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.457] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.457] lstrlenW (lpString="0") returned 1 [0075.457] lstrcpynW (in: lpString1=0x432ea0, lpString2="20313630", iMaxLength=1024 | out: lpString1="20313630") returned="20313630" [0075.457] lstrlenW (lpString="20313630") returned 8 [0075.457] lstrcpynW (in: lpString1=0x40a5f0, lpString2="20313630", iMaxLength=1024 | out: lpString1="20313630") returned="20313630" [0075.457] lstrlenW (lpString="20313630") returned 8 [0075.457] lstrcpynW (in: lpString1=0x46b000, lpString2="20313630", iMaxLength=1024 | out: lpString1="20313630") returned="20313630" [0075.457] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.457] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.457] lstrlenW (lpString="") returned 0 [0075.457] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.457] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.457] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.457] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.457] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0075.457] lstrlenW (lpString="20") returned 2 [0075.457] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0075.457] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.457] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.457] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.457] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.458] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.458] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.458] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.458] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.458] lstrlenW (lpString=" ") returned 1 [0075.458] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.458] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.458] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0075.458] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.458] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.458] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.458] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.458] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.458] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.458] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.458] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.458] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointer(i r5, i", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i") returned="KERNEL32::SetFilePointer(i r5, i" [0075.458] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i") returned 32 [0075.458] lstrcpynW (in: lpString1=0x432ee0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.458] lstrlenW (lpString=" ") returned 1 [0075.458] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointer(i r5, i ", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i ") returned="KERNEL32::SetFilePointer(i r5, i " [0075.458] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i ") returned 33 [0075.458] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointer(i r5, i ", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i ") returned="KERNEL32::SetFilePointer(i r5, i " [0075.459] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.459] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.459] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.459] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.459] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.459] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.459] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.459] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.459] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.459] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.459] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.459] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.459] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.459] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.460] lstrlenW (lpString="C:\\Windows") returned 10 [0075.460] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.460] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.460] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.460] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.460] lstrlenW (lpString="524386") returned 6 [0075.460] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.460] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.460] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.460] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.460] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.460] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.460] lstrlenW (lpString="0") returned 1 [0075.460] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.460] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.460] lstrlenW (lpString="2") returned 1 [0075.460] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.460] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.460] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.460] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.460] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.460] lstrlenW (lpString="2") returned 1 [0075.460] lstrcpynW (in: lpString1=0x432ea0, lpString2="20313630", iMaxLength=1024 | out: lpString1="20313630") returned="20313630" [0075.460] lstrlenW (lpString="20313630") returned 8 [0075.460] lstrcpynW (in: lpString1=0x40a5f0, lpString2="20313630", iMaxLength=1024 | out: lpString1="20313630") returned="20313630" [0075.460] lstrlenW (lpString="20313630") returned 8 [0075.460] lstrcpynW (in: lpString1=0x46b000, lpString2="313630", iMaxLength=1024 | out: lpString1="313630") returned="313630" [0075.460] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.461] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.461] lstrlenW (lpString="") returned 0 [0075.461] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.461] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.461] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.461] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.461] lstrcpynW (in: lpString1=0x432ea4, lpString2="31", iMaxLength=1024 | out: lpString1="31") returned="31" [0075.461] lstrlenW (lpString="31") returned 2 [0075.461] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="1") returned 1 [0075.461] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.461] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.461] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.461] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.461] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.461] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.461] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.461] lstrcpynW (in: lpString1=0x432ea0, lpString2="1", iMaxLength=1024 | out: lpString1="1") returned="1" [0075.461] lstrlenW (lpString="1") returned 1 [0075.461] lstrcpynW (in: lpString1=0x40b5f0, lpString2="1", iMaxLength=1024 | out: lpString1="1") returned="1" [0075.461] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.461] lstrcmpiW (lpString1="1", lpString2="^") returned 1 [0075.461] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.462] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.462] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.462] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.462] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.462] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.462] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.462] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.462] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointer(i r5, i ", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i ") returned="KERNEL32::SetFilePointer(i r5, i " [0075.462] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i ") returned 33 [0075.462] lstrcpynW (in: lpString1=0x432ee2, lpString2="1", iMaxLength=1024 | out: lpString1="1") returned="1" [0075.462] lstrlenW (lpString="1") returned 1 [0075.462] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointer(i r5, i 1", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 1") returned="KERNEL32::SetFilePointer(i r5, i 1" [0075.462] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 1") returned 34 [0075.462] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointer(i r5, i 1", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 1") returned="KERNEL32::SetFilePointer(i r5, i 1" [0075.462] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.462] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.462] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.462] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.463] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.463] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.463] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.463] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.463] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.463] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.463] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.463] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.463] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.463] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.463] lstrlenW (lpString="C:\\Windows") returned 10 [0075.463] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.463] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.463] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.464] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.464] lstrlenW (lpString="524386") returned 6 [0075.464] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.464] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.464] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.464] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.464] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.464] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.464] lstrlenW (lpString="2") returned 1 [0075.464] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.464] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.464] lstrlenW (lpString="4") returned 1 [0075.464] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.464] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.464] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.464] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.464] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.464] lstrlenW (lpString="4") returned 1 [0075.464] lstrcpynW (in: lpString1=0x432ea0, lpString2="20313630", iMaxLength=1024 | out: lpString1="20313630") returned="20313630" [0075.464] lstrlenW (lpString="20313630") returned 8 [0075.464] lstrcpynW (in: lpString1=0x40a5f0, lpString2="20313630", iMaxLength=1024 | out: lpString1="20313630") returned="20313630" [0075.464] lstrlenW (lpString="20313630") returned 8 [0075.464] lstrcpynW (in: lpString1=0x46b000, lpString2="3630", iMaxLength=1024 | out: lpString1="3630") returned="3630" [0075.464] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.464] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.464] lstrlenW (lpString="") returned 0 [0075.464] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.464] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.464] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.464] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.464] lstrcpynW (in: lpString1=0x432ea4, lpString2="36", iMaxLength=1024 | out: lpString1="36") returned="36" [0075.464] lstrlenW (lpString="36") returned 2 [0075.464] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="6") returned 1 [0075.465] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.465] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.465] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.465] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.465] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.465] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.465] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.465] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.465] lstrlenW (lpString="6") returned 1 [0075.465] lstrcpynW (in: lpString1=0x40b5f0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.465] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.465] lstrcmpiW (lpString1="6", lpString2="^") returned 1 [0075.465] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.465] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.465] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.465] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.465] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.465] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.466] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.466] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.466] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointer(i r5, i 1", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 1") returned="KERNEL32::SetFilePointer(i r5, i 1" [0075.466] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 1") returned 34 [0075.466] lstrcpynW (in: lpString1=0x432ee4, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.466] lstrlenW (lpString="6") returned 1 [0075.466] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointer(i r5, i 16", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16") returned="KERNEL32::SetFilePointer(i r5, i 16" [0075.466] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16") returned 35 [0075.466] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointer(i r5, i 16", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16") returned="KERNEL32::SetFilePointer(i r5, i 16" [0075.466] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.466] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.466] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.466] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.466] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.466] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.466] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.466] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.466] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.466] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.467] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.467] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.467] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.467] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.467] lstrlenW (lpString="C:\\Windows") returned 10 [0075.467] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.467] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.467] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.467] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.467] lstrlenW (lpString="524386") returned 6 [0075.467] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.467] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.467] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.467] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.467] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.467] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.467] lstrlenW (lpString="4") returned 1 [0075.467] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.467] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.467] lstrlenW (lpString="6") returned 1 [0075.467] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.467] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.467] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.467] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.468] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.468] lstrlenW (lpString="6") returned 1 [0075.468] lstrcpynW (in: lpString1=0x432ea0, lpString2="20313630", iMaxLength=1024 | out: lpString1="20313630") returned="20313630" [0075.468] lstrlenW (lpString="20313630") returned 8 [0075.468] lstrcpynW (in: lpString1=0x40a5f0, lpString2="20313630", iMaxLength=1024 | out: lpString1="20313630") returned="20313630" [0075.468] lstrlenW (lpString="20313630") returned 8 [0075.468] lstrcpynW (in: lpString1=0x46b000, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.468] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.468] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.468] lstrlenW (lpString="") returned 0 [0075.468] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.468] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.468] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.468] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.468] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.468] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0075.468] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.468] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.468] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.468] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.468] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.468] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.468] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.468] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.468] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.468] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.468] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0075.468] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.469] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.469] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.469] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.469] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.469] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.469] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.469] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.469] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointer(i r5, i 16", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16") returned="KERNEL32::SetFilePointer(i r5, i 16" [0075.469] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16") returned 35 [0075.469] lstrcpynW (in: lpString1=0x432ee6, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.469] lstrlenW (lpString="0") returned 1 [0075.469] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointer(i r5, i 160", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 160") returned="KERNEL32::SetFilePointer(i r5, i 160" [0075.469] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 160") returned 36 [0075.469] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointer(i r5, i 160", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 160") returned="KERNEL32::SetFilePointer(i r5, i 160" [0075.469] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.469] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.469] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.470] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.470] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.470] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.470] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.470] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.470] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.470] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.470] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.470] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.470] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.470] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.470] lstrlenW (lpString="C:\\Windows") returned 10 [0075.470] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.471] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.471] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.471] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.471] lstrlenW (lpString="524386") returned 6 [0075.471] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.471] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.471] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.471] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.471] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.471] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.471] lstrlenW (lpString="6") returned 1 [0075.471] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.471] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.471] lstrlenW (lpString="8") returned 1 [0075.471] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.471] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.471] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.471] lstrlenW (lpString="Execute: ") returned 9 [0075.471] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.471] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.471] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.472] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x37 [0075.472] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x37 [0075.472] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x37, lParam=0x0) returned 0x1 [0075.472] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.473] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.473] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.473] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.473] lstrcpynW (in: lpString1=0x432ea0, lpString2="336", iMaxLength=1024 | out: lpString1="336") returned="336" [0075.473] lstrlenW (lpString="336") returned 3 [0075.473] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="344") returned 3 [0075.473] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.473] lstrlenW (lpString="") returned 0 [0075.473] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.473] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.473] lstrcpynW (in: lpString1=0x432ea0, lpString2="344", iMaxLength=1024 | out: lpString1="344") returned="344" [0075.473] lstrlenW (lpString="344") returned 3 [0075.473] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.473] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0075.473] lstrlenW (lpString="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned 1023 [0075.473] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.473] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.473] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.474] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.474] lstrcpynW (in: lpString1=0x432ea4, lpString2="C5B855B0", iMaxLength=1024 | out: lpString1="C5B855B0") returned="C5B855B0" [0075.474] lstrlenW (lpString="C5B855B0") returned 8 [0075.474] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="808460332") returned 9 [0075.474] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.474] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.474] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.474] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.474] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.474] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.474] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.474] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.474] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.474] lstrcpynW (in: lpString1=0x432ea0, lpString2="808460332", iMaxLength=1024 | out: lpString1="808460332") returned="808460332" [0075.474] lstrlenW (lpString="808460332") returned 9 [0075.474] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="3030202C") returned 8 [0075.475] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.475] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.475] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.475] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.475] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.475] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.475] lstrlenW (lpString="0") returned 1 [0075.475] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.475] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.475] lstrlenW (lpString="0") returned 1 [0075.475] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.475] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.475] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.475] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.475] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.475] lstrlenW (lpString="0") returned 1 [0075.475] lstrcpynW (in: lpString1=0x432ea0, lpString2="3030202C", iMaxLength=1024 | out: lpString1="3030202C") returned="3030202C" [0075.475] lstrlenW (lpString="3030202C") returned 8 [0075.475] lstrcpynW (in: lpString1=0x40a5f0, lpString2="3030202C", iMaxLength=1024 | out: lpString1="3030202C") returned="3030202C" [0075.475] lstrlenW (lpString="3030202C") returned 8 [0075.475] lstrcpynW (in: lpString1=0x46b000, lpString2="3030202C", iMaxLength=1024 | out: lpString1="3030202C") returned="3030202C" [0075.475] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.476] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.476] lstrlenW (lpString="") returned 0 [0075.476] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.476] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.476] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.476] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.476] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.476] lstrlenW (lpString="30") returned 2 [0075.476] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0075.476] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.476] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.476] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.476] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.476] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.476] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.476] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.476] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.476] lstrlenW (lpString="0") returned 1 [0075.476] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.476] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.476] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0075.476] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.477] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.477] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.477] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.477] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.477] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.477] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.477] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.477] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointer(i r5, i 160", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 160") returned="KERNEL32::SetFilePointer(i r5, i 160" [0075.477] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 160") returned 36 [0075.477] lstrcpynW (in: lpString1=0x432ee8, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.477] lstrlenW (lpString="0") returned 1 [0075.477] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointer(i r5, i 1600", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 1600") returned="KERNEL32::SetFilePointer(i r5, i 1600" [0075.477] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 1600") returned 37 [0075.478] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointer(i r5, i 1600", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 1600") returned="KERNEL32::SetFilePointer(i r5, i 1600" [0075.478] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.478] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.478] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.478] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.478] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.478] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.478] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.478] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.478] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.478] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.478] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.478] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.478] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.479] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.479] lstrlenW (lpString="C:\\Windows") returned 10 [0075.479] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.479] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.479] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.479] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.479] lstrlenW (lpString="524386") returned 6 [0075.479] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.479] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.479] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.479] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.479] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.479] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.479] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.479] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.479] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.479] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.479] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.479] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0075.480] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.480] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.480] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.480] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.480] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0075.480] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.480] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.480] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.480] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.480] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.480] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.480] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.480] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.480] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointer(i r5, i 1600", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 1600") returned="KERNEL32::SetFilePointer(i r5, i 1600" [0075.481] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 1600") returned 37 [0075.481] lstrcpynW (in: lpString1=0x432eea, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.481] lstrlenW (lpString="0") returned 1 [0075.481] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000") returned="KERNEL32::SetFilePointer(i r5, i 16000" [0075.481] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000") returned 38 [0075.481] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointer(i r5, i 16000", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000") returned="KERNEL32::SetFilePointer(i r5, i 16000" [0075.481] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.481] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.481] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.481] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.481] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.481] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.481] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.481] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.481] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.482] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.482] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.482] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.482] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.482] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.482] lstrlenW (lpString="C:\\Windows") returned 10 [0075.482] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.482] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.482] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.482] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.482] lstrlenW (lpString="524386") returned 6 [0075.482] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.482] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.482] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.482] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.482] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.483] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.483] lstrlenW (lpString="2") returned 1 [0075.483] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.483] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.483] lstrlenW (lpString="4") returned 1 [0075.483] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.483] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.483] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.483] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.483] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.483] lstrlenW (lpString="4") returned 1 [0075.483] lstrcpynW (in: lpString1=0x432ea0, lpString2="3030202C", iMaxLength=1024 | out: lpString1="3030202C") returned="3030202C" [0075.483] lstrlenW (lpString="3030202C") returned 8 [0075.483] lstrcpynW (in: lpString1=0x40a5f0, lpString2="3030202C", iMaxLength=1024 | out: lpString1="3030202C") returned="3030202C" [0075.483] lstrlenW (lpString="3030202C") returned 8 [0075.483] lstrcpynW (in: lpString1=0x46b000, lpString2="202C", iMaxLength=1024 | out: lpString1="202C") returned="202C" [0075.483] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.483] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.483] lstrlenW (lpString="") returned 0 [0075.483] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.483] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.483] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.483] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.483] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0075.483] lstrlenW (lpString="20") returned 2 [0075.483] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0075.483] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.484] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.484] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.484] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.484] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.484] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.484] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.484] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.484] lstrlenW (lpString=" ") returned 1 [0075.484] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.484] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.484] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0075.484] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.484] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.484] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.484] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.484] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.484] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.485] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.485] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.485] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000") returned="KERNEL32::SetFilePointer(i r5, i 16000" [0075.485] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000") returned 38 [0075.485] lstrcpynW (in: lpString1=0x432eec, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.485] lstrlenW (lpString=" ") returned 1 [0075.485] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 ", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 ") returned="KERNEL32::SetFilePointer(i r5, i 16000 " [0075.485] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000 ") returned 39 [0075.485] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 ", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 ") returned="KERNEL32::SetFilePointer(i r5, i 16000 " [0075.485] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.485] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.485] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.485] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.485] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.485] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.485] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.485] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.486] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.486] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.486] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.486] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.486] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.486] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.486] lstrlenW (lpString="C:\\Windows") returned 10 [0075.486] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.486] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.486] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.486] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.486] lstrlenW (lpString="524386") returned 6 [0075.486] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.486] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.486] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.486] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.487] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.487] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.487] lstrlenW (lpString="4") returned 1 [0075.487] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.487] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.487] lstrlenW (lpString="6") returned 1 [0075.487] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.487] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.487] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.487] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.487] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.487] lstrlenW (lpString="6") returned 1 [0075.487] lstrcpynW (in: lpString1=0x432ea0, lpString2="3030202C", iMaxLength=1024 | out: lpString1="3030202C") returned="3030202C" [0075.487] lstrlenW (lpString="3030202C") returned 8 [0075.487] lstrcpynW (in: lpString1=0x40a5f0, lpString2="3030202C", iMaxLength=1024 | out: lpString1="3030202C") returned="3030202C" [0075.487] lstrlenW (lpString="3030202C") returned 8 [0075.487] lstrcpynW (in: lpString1=0x46b000, lpString2="2C", iMaxLength=1024 | out: lpString1="2C") returned="2C" [0075.487] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.487] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.487] lstrlenW (lpString="") returned 0 [0075.487] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.487] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.487] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.487] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.487] lstrcpynW (in: lpString1=0x432ea4, lpString2="2C", iMaxLength=1024 | out: lpString1="2C") returned="2C" [0075.487] lstrlenW (lpString="2C") returned 2 [0075.487] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=",") returned 1 [0075.487] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.487] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.487] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.488] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.488] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.488] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.488] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.488] lstrcpynW (in: lpString1=0x432ea0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0075.488] lstrlenW (lpString=",") returned 1 [0075.488] lstrcpynW (in: lpString1=0x40b5f0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0075.488] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.488] lstrcmpiW (lpString1=",", lpString2="^") returned -1 [0075.488] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.488] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.488] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.488] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.488] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.488] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.488] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.488] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.489] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 ", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 ") returned="KERNEL32::SetFilePointer(i r5, i 16000 " [0075.489] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000 ") returned 39 [0075.489] lstrcpynW (in: lpString1=0x432eee, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0075.489] lstrlenW (lpString=",") returned 1 [0075.489] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 ,", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 ,") returned="KERNEL32::SetFilePointer(i r5, i 16000 ," [0075.489] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000 ,") returned 40 [0075.489] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 ,", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 ,") returned="KERNEL32::SetFilePointer(i r5, i 16000 ," [0075.489] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.489] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.489] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.489] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.489] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.489] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.489] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.489] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.489] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.489] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.490] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.490] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.490] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.490] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.490] lstrlenW (lpString="C:\\Windows") returned 10 [0075.490] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.490] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.490] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.490] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.490] lstrlenW (lpString="524386") returned 6 [0075.490] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.490] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.490] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.490] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.490] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.491] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.491] lstrlenW (lpString="6") returned 1 [0075.491] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.491] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.491] lstrlenW (lpString="8") returned 1 [0075.491] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.491] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.491] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.491] lstrlenW (lpString="Execute: ") returned 9 [0075.491] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.491] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.491] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.491] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x38 [0075.491] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x38 [0075.492] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x38, lParam=0x0) returned 0x1 [0075.492] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.492] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.492] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.492] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.492] lstrcpynW (in: lpString1=0x432ea0, lpString2="344", iMaxLength=1024 | out: lpString1="344") returned="344" [0075.492] lstrlenW (lpString="344") returned 3 [0075.492] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="352") returned 3 [0075.493] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.493] lstrlenW (lpString="") returned 0 [0075.493] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.493] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.493] lstrcpynW (in: lpString1=0x432ea0, lpString2="352", iMaxLength=1024 | out: lpString1="352") returned="352" [0075.493] lstrlenW (lpString="352") returned 3 [0075.493] lstrcpynW (in: lpString1=0x432ea0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0075.493] lstrlenW (lpString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returned 1023 [0075.493] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.493] lstrcpynW (in: lpString1=0x46d000, lpString2="D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString1="D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.493] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.493] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.493] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.493] lstrcpynW (in: lpString1=0x432ea4, lpString2="D5E155AC", iMaxLength=1024 | out: lpString1="D5E155AC") returned="D5E155AC" [0075.493] lstrlenW (lpString="D5E155AC") returned 8 [0075.493] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="543760432") returned 9 [0075.493] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.493] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.493] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.493] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.494] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.494] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.494] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.494] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.494] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.494] lstrcpynW (in: lpString1=0x432ea0, lpString2="543760432", iMaxLength=1024 | out: lpString1="543760432") returned="543760432" [0075.494] lstrlenW (lpString="543760432") returned 9 [0075.494] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="20692030") returned 8 [0075.494] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.494] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.494] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.494] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.494] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.494] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.494] lstrlenW (lpString="0") returned 1 [0075.494] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.494] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.495] lstrlenW (lpString="0") returned 1 [0075.495] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.495] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.495] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.495] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.495] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.495] lstrlenW (lpString="0") returned 1 [0075.495] lstrcpynW (in: lpString1=0x432ea0, lpString2="20692030", iMaxLength=1024 | out: lpString1="20692030") returned="20692030" [0075.495] lstrlenW (lpString="20692030") returned 8 [0075.495] lstrcpynW (in: lpString1=0x40a5f0, lpString2="20692030", iMaxLength=1024 | out: lpString1="20692030") returned="20692030" [0075.495] lstrlenW (lpString="20692030") returned 8 [0075.495] lstrcpynW (in: lpString1=0x46b000, lpString2="20692030", iMaxLength=1024 | out: lpString1="20692030") returned="20692030" [0075.495] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.495] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.495] lstrlenW (lpString="") returned 0 [0075.495] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.495] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.495] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.495] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.495] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0075.495] lstrlenW (lpString="20") returned 2 [0075.495] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0075.495] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.495] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.495] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.495] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.496] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.496] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.496] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.496] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.496] lstrlenW (lpString=" ") returned 1 [0075.496] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.496] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.496] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0075.496] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.496] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.496] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.496] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.496] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.496] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.497] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.497] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.497] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 ,", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 ,") returned="KERNEL32::SetFilePointer(i r5, i 16000 ," [0075.497] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000 ,") returned 40 [0075.497] lstrcpynW (in: lpString1=0x432ef0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.497] lstrlenW (lpString=" ") returned 1 [0075.497] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , ", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , ") returned="KERNEL32::SetFilePointer(i r5, i 16000 , " [0075.497] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000 , ") returned 41 [0075.497] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , ", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , ") returned="KERNEL32::SetFilePointer(i r5, i 16000 , " [0075.497] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.497] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.497] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.497] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.497] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.497] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.497] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.497] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.498] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.498] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.498] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.498] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.498] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.498] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.498] lstrlenW (lpString="C:\\Windows") returned 10 [0075.498] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.498] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.498] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.498] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.498] lstrlenW (lpString="524386") returned 6 [0075.498] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.498] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.498] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.498] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.498] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.498] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.499] lstrlenW (lpString="0") returned 1 [0075.499] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.499] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.499] lstrlenW (lpString="2") returned 1 [0075.499] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.499] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.499] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.499] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.499] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.499] lstrlenW (lpString="2") returned 1 [0075.499] lstrcpynW (in: lpString1=0x432ea0, lpString2="20692030", iMaxLength=1024 | out: lpString1="20692030") returned="20692030" [0075.499] lstrlenW (lpString="20692030") returned 8 [0075.499] lstrcpynW (in: lpString1=0x40a5f0, lpString2="20692030", iMaxLength=1024 | out: lpString1="20692030") returned="20692030" [0075.499] lstrlenW (lpString="20692030") returned 8 [0075.499] lstrcpynW (in: lpString1=0x46b000, lpString2="692030", iMaxLength=1024 | out: lpString1="692030") returned="692030" [0075.499] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.499] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.499] lstrlenW (lpString="") returned 0 [0075.499] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.499] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.499] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.499] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.499] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0075.499] lstrlenW (lpString="69") returned 2 [0075.499] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0075.499] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.499] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.499] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.500] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.500] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.500] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.500] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.500] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.501] lstrlenW (lpString="i") returned 1 [0075.501] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.501] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.502] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0075.502] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.502] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.502] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.502] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.502] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.502] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.502] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.502] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.502] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , ", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , ") returned="KERNEL32::SetFilePointer(i r5, i 16000 , " [0075.502] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000 , ") returned 41 [0075.502] lstrcpynW (in: lpString1=0x432ef2, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.502] lstrlenW (lpString="i") returned 1 [0075.502] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i" [0075.502] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000 , i") returned 42 [0075.502] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i" [0075.502] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.502] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.503] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.503] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.503] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.503] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.503] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.503] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.503] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.503] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.503] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.503] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.503] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.503] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.503] lstrlenW (lpString="C:\\Windows") returned 10 [0075.504] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.504] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.504] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.504] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.504] lstrlenW (lpString="524386") returned 6 [0075.504] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.504] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.504] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.504] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.504] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.504] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.504] lstrlenW (lpString="2") returned 1 [0075.504] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.504] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.504] lstrlenW (lpString="4") returned 1 [0075.504] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.504] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.504] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.504] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.504] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.504] lstrlenW (lpString="4") returned 1 [0075.504] lstrcpynW (in: lpString1=0x432ea0, lpString2="20692030", iMaxLength=1024 | out: lpString1="20692030") returned="20692030" [0075.504] lstrlenW (lpString="20692030") returned 8 [0075.504] lstrcpynW (in: lpString1=0x40a5f0, lpString2="20692030", iMaxLength=1024 | out: lpString1="20692030") returned="20692030" [0075.504] lstrlenW (lpString="20692030") returned 8 [0075.504] lstrcpynW (in: lpString1=0x46b000, lpString2="2030", iMaxLength=1024 | out: lpString1="2030") returned="2030" [0075.505] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.505] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.505] lstrlenW (lpString="") returned 0 [0075.505] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.505] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.505] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.505] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.505] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0075.505] lstrlenW (lpString="20") returned 2 [0075.505] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0075.505] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.505] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.505] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.505] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.505] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.505] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.505] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.505] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.505] lstrlenW (lpString=" ") returned 1 [0075.505] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.505] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.505] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0075.505] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.506] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.506] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.506] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.506] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.506] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.506] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.506] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.506] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i" [0075.506] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000 , i") returned 42 [0075.506] lstrcpynW (in: lpString1=0x432ef4, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.506] lstrlenW (lpString=" ") returned 1 [0075.506] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i ", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i ") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i " [0075.506] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000 , i ") returned 43 [0075.506] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i ", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i ") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i " [0075.506] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.506] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.506] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.507] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.507] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.507] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.507] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.507] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.507] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.507] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.507] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.507] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.507] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.507] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.507] lstrlenW (lpString="C:\\Windows") returned 10 [0075.508] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.508] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.508] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.508] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.508] lstrlenW (lpString="524386") returned 6 [0075.508] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.508] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.508] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.508] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.508] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.508] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.508] lstrlenW (lpString="4") returned 1 [0075.508] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.508] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.508] lstrlenW (lpString="6") returned 1 [0075.508] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.509] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.509] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.509] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.509] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.509] lstrlenW (lpString="6") returned 1 [0075.509] lstrcpynW (in: lpString1=0x432ea0, lpString2="20692030", iMaxLength=1024 | out: lpString1="20692030") returned="20692030" [0075.509] lstrlenW (lpString="20692030") returned 8 [0075.509] lstrcpynW (in: lpString1=0x40a5f0, lpString2="20692030", iMaxLength=1024 | out: lpString1="20692030") returned="20692030" [0075.509] lstrlenW (lpString="20692030") returned 8 [0075.509] lstrcpynW (in: lpString1=0x46b000, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.509] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.509] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.509] lstrlenW (lpString="") returned 0 [0075.509] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.509] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.509] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.509] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.509] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.509] lstrlenW (lpString="30") returned 2 [0075.509] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0075.509] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.509] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.509] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.509] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.509] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.510] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.510] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.510] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.510] lstrlenW (lpString="0") returned 1 [0075.510] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.510] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.510] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0075.510] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.510] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.510] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.510] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.510] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.510] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.510] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.510] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.510] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i ", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i ") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i " [0075.511] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000 , i ") returned 43 [0075.511] lstrcpynW (in: lpString1=0x432ef6, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.511] lstrlenW (lpString="0") returned 1 [0075.511] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i 0", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i 0") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i 0" [0075.511] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000 , i 0") returned 44 [0075.511] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i 0", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i 0") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i 0" [0075.511] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.511] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.511] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.511] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.511] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.511] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.511] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.511] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.511] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.511] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.512] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.512] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.512] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.512] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.512] lstrlenW (lpString="C:\\Windows") returned 10 [0075.512] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.512] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.512] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.512] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.512] lstrlenW (lpString="524386") returned 6 [0075.512] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.512] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.512] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.512] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.512] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.512] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.513] lstrlenW (lpString="6") returned 1 [0075.513] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.513] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.513] lstrlenW (lpString="8") returned 1 [0075.513] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.513] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.513] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.513] lstrlenW (lpString="Execute: ") returned 9 [0075.513] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.513] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.513] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.513] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x39 [0075.513] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x39 [0075.514] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x39, lParam=0x0) returned 0x1 [0075.514] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.514] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.514] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.514] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.514] lstrcpynW (in: lpString1=0x432ea0, lpString2="352", iMaxLength=1024 | out: lpString1="352") returned="352" [0075.514] lstrlenW (lpString="352") returned 3 [0075.514] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="360") returned 3 [0075.514] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.514] lstrlenW (lpString="") returned 0 [0075.514] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.514] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.514] lstrcpynW (in: lpString1=0x432ea0, lpString2="360", iMaxLength=1024 | out: lpString1="360") returned="360" [0075.514] lstrlenW (lpString="360") returned 3 [0075.515] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrlenW (lpString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returned 1023 [0075.515] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.515] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString1="D9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.515] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.515] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.515] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.515] lstrcpynW (in: lpString1=0x432ea4, lpString2="D9E155AC", iMaxLength=1024 | out: lpString1="D9E155AC") returned="D9E155AC" [0075.515] lstrlenW (lpString="D9E155AC") returned 8 [0075.515] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="745087024") returned 9 [0075.515] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.515] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.515] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.515] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.516] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.516] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.516] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.516] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.516] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.516] lstrcpynW (in: lpString1=0x432ea0, lpString2="745087024", iMaxLength=1024 | out: lpString1="745087024") returned="745087024" [0075.516] lstrlenW (lpString="745087024") returned 9 [0075.516] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="2C692030") returned 8 [0075.516] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.516] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.516] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.516] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.516] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.516] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.516] lstrlenW (lpString="0") returned 1 [0075.516] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.517] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.517] lstrlenW (lpString="0") returned 1 [0075.517] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.517] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.517] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.517] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.517] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.517] lstrlenW (lpString="0") returned 1 [0075.517] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C692030", iMaxLength=1024 | out: lpString1="2C692030") returned="2C692030" [0075.517] lstrlenW (lpString="2C692030") returned 8 [0075.517] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C692030", iMaxLength=1024 | out: lpString1="2C692030") returned="2C692030" [0075.517] lstrlenW (lpString="2C692030") returned 8 [0075.517] lstrcpynW (in: lpString1=0x46b000, lpString2="2C692030", iMaxLength=1024 | out: lpString1="2C692030") returned="2C692030" [0075.517] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.517] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.517] lstrlenW (lpString="") returned 0 [0075.517] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.517] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.517] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.517] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.517] lstrcpynW (in: lpString1=0x432ea4, lpString2="2C", iMaxLength=1024 | out: lpString1="2C") returned="2C" [0075.517] lstrlenW (lpString="2C") returned 2 [0075.517] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=",") returned 1 [0075.517] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.517] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.517] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.518] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.518] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.518] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.518] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.518] lstrcpynW (in: lpString1=0x432ea0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0075.518] lstrlenW (lpString=",") returned 1 [0075.518] lstrcpynW (in: lpString1=0x40b5f0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0075.518] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.518] lstrcmpiW (lpString1=",", lpString2="^") returned -1 [0075.518] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.518] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.518] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.518] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.518] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.518] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.519] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.519] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.519] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.519] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.519] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.519] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.519] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.519] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.519] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.519] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.519] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.520] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.520] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.520] lstrlenW (lpString="C:\\Windows") returned 10 [0075.520] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.520] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.520] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.520] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.520] lstrlenW (lpString="524386") returned 6 [0075.520] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.520] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.520] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.520] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.520] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.520] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.520] lstrlenW (lpString="0") returned 1 [0075.520] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.520] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.520] lstrlenW (lpString="2") returned 1 [0075.521] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.521] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.521] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.521] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.521] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.521] lstrlenW (lpString="2") returned 1 [0075.521] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C692030", iMaxLength=1024 | out: lpString1="2C692030") returned="2C692030" [0075.521] lstrlenW (lpString="2C692030") returned 8 [0075.521] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C692030", iMaxLength=1024 | out: lpString1="2C692030") returned="2C692030" [0075.521] lstrlenW (lpString="2C692030") returned 8 [0075.521] lstrcpynW (in: lpString1=0x46b000, lpString2="692030", iMaxLength=1024 | out: lpString1="692030") returned="692030" [0075.521] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.521] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.521] lstrlenW (lpString="") returned 0 [0075.521] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.521] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.521] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.521] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.521] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0075.521] lstrlenW (lpString="69") returned 2 [0075.521] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0075.521] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.521] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.521] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.522] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.522] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.522] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.522] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.522] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.522] lstrlenW (lpString="i") returned 1 [0075.522] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.522] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.522] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0075.522] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.522] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.522] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.522] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.522] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.522] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.523] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.523] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.523] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i 0," [0075.523] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,") returned 45 [0075.523] lstrcpynW (in: lpString1=0x432efa, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.523] lstrlenW (lpString="i") returned 1 [0075.523] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i" [0075.524] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i") returned 46 [0075.524] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i" [0075.524] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.524] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.524] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.524] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.524] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.524] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.524] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.524] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.524] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.524] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.526] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.526] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.526] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.526] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.526] lstrlenW (lpString="C:\\Windows") returned 10 [0075.526] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.526] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.526] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.526] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.526] lstrlenW (lpString="524386") returned 6 [0075.526] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.526] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.526] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.526] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.526] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.526] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.526] lstrlenW (lpString="2") returned 1 [0075.526] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.526] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.527] lstrlenW (lpString="4") returned 1 [0075.527] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.527] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.527] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.527] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.527] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.527] lstrlenW (lpString="4") returned 1 [0075.527] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C692030", iMaxLength=1024 | out: lpString1="2C692030") returned="2C692030" [0075.527] lstrlenW (lpString="2C692030") returned 8 [0075.527] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C692030", iMaxLength=1024 | out: lpString1="2C692030") returned="2C692030" [0075.527] lstrlenW (lpString="2C692030") returned 8 [0075.527] lstrcpynW (in: lpString1=0x46b000, lpString2="2030", iMaxLength=1024 | out: lpString1="2030") returned="2030" [0075.527] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.527] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.527] lstrlenW (lpString="") returned 0 [0075.527] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.527] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.527] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.527] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.527] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0075.527] lstrlenW (lpString="20") returned 2 [0075.527] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0075.527] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.527] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.527] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.527] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.528] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.528] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.528] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.528] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.528] lstrlenW (lpString=" ") returned 1 [0075.528] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.528] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.528] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0075.528] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.528] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.528] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.528] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.528] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.528] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.528] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.528] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.528] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i" [0075.528] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i") returned 46 [0075.529] lstrcpynW (in: lpString1=0x432efc, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.529] lstrlenW (lpString=" ") returned 1 [0075.529] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i ", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i ") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i " [0075.529] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i ") returned 47 [0075.529] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i ", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i ") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i " [0075.529] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.529] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.529] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.529] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.529] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.529] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.529] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.529] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.529] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.529] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.530] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.530] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.530] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.530] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.530] lstrlenW (lpString="C:\\Windows") returned 10 [0075.530] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.530] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.530] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.530] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.530] lstrlenW (lpString="524386") returned 6 [0075.530] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.530] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.530] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.530] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.530] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.530] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.530] lstrlenW (lpString="4") returned 1 [0075.530] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.531] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.531] lstrlenW (lpString="6") returned 1 [0075.531] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.531] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.531] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.531] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.531] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.531] lstrlenW (lpString="6") returned 1 [0075.531] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C692030", iMaxLength=1024 | out: lpString1="2C692030") returned="2C692030" [0075.531] lstrlenW (lpString="2C692030") returned 8 [0075.531] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C692030", iMaxLength=1024 | out: lpString1="2C692030") returned="2C692030" [0075.531] lstrlenW (lpString="2C692030") returned 8 [0075.531] lstrcpynW (in: lpString1=0x46b000, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.531] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.531] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.531] lstrlenW (lpString="") returned 0 [0075.531] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.531] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.531] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.531] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.531] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.531] lstrlenW (lpString="30") returned 2 [0075.531] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0075.531] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.531] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.531] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.532] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.532] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.532] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.532] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.532] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.532] lstrlenW (lpString="0") returned 1 [0075.532] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.532] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.532] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0075.532] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.532] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.532] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.532] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.532] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.532] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.533] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.533] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.533] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i ", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i ") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i " [0075.533] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i ") returned 47 [0075.533] lstrcpynW (in: lpString1=0x432efe, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.533] lstrlenW (lpString="0") returned 1 [0075.533] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0" [0075.533] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0") returned 48 [0075.533] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0" [0075.533] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.533] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.533] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.533] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.533] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.533] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.533] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.533] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.534] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.534] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.534] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.534] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.534] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.534] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.534] lstrlenW (lpString="C:\\Windows") returned 10 [0075.534] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.534] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.534] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.534] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.534] lstrlenW (lpString="524386") returned 6 [0075.534] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.534] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.534] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.534] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.535] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.535] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.535] lstrlenW (lpString="6") returned 1 [0075.535] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.535] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.535] lstrlenW (lpString="8") returned 1 [0075.535] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.535] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.535] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.535] lstrlenW (lpString="Execute: ") returned 9 [0075.535] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.535] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.535] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.535] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x3a [0075.536] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x3a [0075.536] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x3a, lParam=0x0) returned 0x1 [0075.536] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.536] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.536] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.536] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.536] lstrcpynW (in: lpString1=0x432ea0, lpString2="360", iMaxLength=1024 | out: lpString1="360") returned="360" [0075.536] lstrlenW (lpString="360") returned 3 [0075.536] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="368") returned 3 [0075.536] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.536] lstrlenW (lpString="") returned 0 [0075.537] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.537] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.537] lstrcpynW (in: lpString1=0x432ea0, lpString2="368", iMaxLength=1024 | out: lpString1="368") returned="368" [0075.537] lstrlenW (lpString="368") returned 3 [0075.537] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.537] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.537] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.537] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.537] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.537] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.537] lstrcpynW (in: lpString1=0x432ea4, lpString2="DCE15BEE", iMaxLength=1024 | out: lpString1="DCE15BEE") returned="DCE15BEE" [0075.537] lstrlenW (lpString="DCE15BEE") returned 8 [0075.537] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="694759026") returned 9 [0075.537] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.537] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.537] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.537] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.538] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.538] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.538] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.538] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.538] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.538] lstrcpynW (in: lpString1=0x432ea0, lpString2="694759026", iMaxLength=1024 | out: lpString1="694759026") returned="694759026" [0075.538] lstrlenW (lpString="694759026") returned 9 [0075.538] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="29692E72") returned 8 [0075.538] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.538] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.538] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.538] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.539] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.539] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.539] lstrlenW (lpString="0") returned 1 [0075.539] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.539] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.539] lstrlenW (lpString="0") returned 1 [0075.539] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.539] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.539] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.539] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.539] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.539] lstrlenW (lpString="0") returned 1 [0075.539] lstrcpynW (in: lpString1=0x432ea0, lpString2="29692E72", iMaxLength=1024 | out: lpString1="29692E72") returned="29692E72" [0075.539] lstrlenW (lpString="29692E72") returned 8 [0075.539] lstrcpynW (in: lpString1=0x40a5f0, lpString2="29692E72", iMaxLength=1024 | out: lpString1="29692E72") returned="29692E72" [0075.539] lstrlenW (lpString="29692E72") returned 8 [0075.539] lstrcpynW (in: lpString1=0x46b000, lpString2="29692E72", iMaxLength=1024 | out: lpString1="29692E72") returned="29692E72" [0075.539] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.539] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.539] lstrlenW (lpString="") returned 0 [0075.539] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.540] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.540] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.540] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.540] lstrcpynW (in: lpString1=0x432ea4, lpString2="29", iMaxLength=1024 | out: lpString1="29") returned="29" [0075.540] lstrlenW (lpString="29") returned 2 [0075.540] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=")") returned 1 [0075.540] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.540] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.540] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.540] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.540] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.540] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.540] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.540] lstrcpynW (in: lpString1=0x432ea0, lpString2=")", iMaxLength=1024 | out: lpString1=")") returned=")" [0075.540] lstrlenW (lpString=")") returned 1 [0075.540] lstrcpynW (in: lpString1=0x40b5f0, lpString2=")", iMaxLength=1024 | out: lpString1=")") returned=")" [0075.540] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.540] lstrcmpiW (lpString1=")", lpString2="^") returned -1 [0075.540] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.540] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.540] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.541] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.541] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.541] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.541] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.541] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.541] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0" [0075.541] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0") returned 48 [0075.541] lstrcpynW (in: lpString1=0x432f00, lpString2=")", iMaxLength=1024 | out: lpString1=")") returned=")" [0075.541] lstrlenW (lpString=")") returned 1 [0075.541] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)" [0075.541] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)") returned 49 [0075.541] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)" [0075.541] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.541] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.541] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.541] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.541] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.541] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.542] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.542] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.542] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.542] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.542] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.542] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.542] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.542] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.542] lstrlenW (lpString="C:\\Windows") returned 10 [0075.542] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.542] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.542] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.542] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.542] lstrlenW (lpString="524386") returned 6 [0075.542] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.543] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.543] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.543] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.543] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.543] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.543] lstrlenW (lpString="0") returned 1 [0075.543] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.543] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.543] lstrlenW (lpString="2") returned 1 [0075.543] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.543] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.543] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.543] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.543] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.543] lstrlenW (lpString="2") returned 1 [0075.543] lstrcpynW (in: lpString1=0x432ea0, lpString2="29692E72", iMaxLength=1024 | out: lpString1="29692E72") returned="29692E72" [0075.543] lstrlenW (lpString="29692E72") returned 8 [0075.543] lstrcpynW (in: lpString1=0x40a5f0, lpString2="29692E72", iMaxLength=1024 | out: lpString1="29692E72") returned="29692E72" [0075.543] lstrlenW (lpString="29692E72") returned 8 [0075.543] lstrcpynW (in: lpString1=0x46b000, lpString2="692E72", iMaxLength=1024 | out: lpString1="692E72") returned="692E72" [0075.543] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.543] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.543] lstrlenW (lpString="") returned 0 [0075.543] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.543] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.543] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.543] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.543] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0075.543] lstrlenW (lpString="69") returned 2 [0075.543] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0075.544] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.544] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.544] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.544] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.544] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.544] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.544] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.544] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.544] lstrlenW (lpString="i") returned 1 [0075.544] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.544] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.544] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0075.544] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.544] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.544] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.544] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.544] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.544] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.545] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.545] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.545] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)" [0075.545] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)") returned 49 [0075.545] lstrcpynW (in: lpString1=0x432f02, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.545] lstrlenW (lpString="i") returned 1 [0075.545] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i" [0075.545] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i") returned 50 [0075.545] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i" [0075.545] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.545] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.545] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.545] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.545] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.545] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.545] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.545] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.546] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.546] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.546] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.546] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.546] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.546] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.546] lstrlenW (lpString="C:\\Windows") returned 10 [0075.546] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.546] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.546] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.546] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.546] lstrlenW (lpString="524386") returned 6 [0075.546] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.546] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.546] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.546] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.547] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.547] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.547] lstrlenW (lpString="2") returned 1 [0075.547] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.547] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.547] lstrlenW (lpString="4") returned 1 [0075.547] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.547] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.547] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.547] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.547] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.547] lstrlenW (lpString="4") returned 1 [0075.547] lstrcpynW (in: lpString1=0x432ea0, lpString2="29692E72", iMaxLength=1024 | out: lpString1="29692E72") returned="29692E72" [0075.547] lstrlenW (lpString="29692E72") returned 8 [0075.547] lstrcpynW (in: lpString1=0x40a5f0, lpString2="29692E72", iMaxLength=1024 | out: lpString1="29692E72") returned="29692E72" [0075.547] lstrlenW (lpString="29692E72") returned 8 [0075.547] lstrcpynW (in: lpString1=0x46b000, lpString2="2E72", iMaxLength=1024 | out: lpString1="2E72") returned="2E72" [0075.547] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.547] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.547] lstrlenW (lpString="") returned 0 [0075.547] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.547] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.547] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.547] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.547] lstrcpynW (in: lpString1=0x432ea4, lpString2="2E", iMaxLength=1024 | out: lpString1="2E") returned="2E" [0075.547] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=".") returned 1 [0075.547] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.547] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.547] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.548] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.548] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.548] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.548] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.548] lstrcpynW (in: lpString1=0x432ea0, lpString2=".", iMaxLength=1024 | out: lpString1=".") returned="." [0075.548] lstrcpynW (in: lpString1=0x40b5f0, lpString2=".", iMaxLength=1024 | out: lpString1=".") returned="." [0075.548] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.548] lstrcmpiW (lpString1=".", lpString2="^") returned -1 [0075.548] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.548] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.548] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.548] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.548] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.548] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.548] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.548] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.548] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i" [0075.548] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i") returned 50 [0075.549] lstrcpynW (in: lpString1=0x432f04, lpString2=".", iMaxLength=1024 | out: lpString1=".") returned="." [0075.549] lstrlenW (lpString=".") returned 1 [0075.549] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i." [0075.549] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.") returned 51 [0075.549] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i." [0075.549] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.549] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.549] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.549] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.549] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.549] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.549] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.549] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.549] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.549] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.549] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.550] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.550] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.550] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.550] lstrlenW (lpString="C:\\Windows") returned 10 [0075.550] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.550] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.550] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.550] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.550] lstrlenW (lpString="524386") returned 6 [0075.550] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.550] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.550] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.550] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.550] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.550] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.550] lstrlenW (lpString="4") returned 1 [0075.550] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.550] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.550] lstrlenW (lpString="6") returned 1 [0075.550] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.550] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.550] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.550] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.551] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.551] lstrlenW (lpString="6") returned 1 [0075.551] lstrcpynW (in: lpString1=0x432ea0, lpString2="29692E72", iMaxLength=1024 | out: lpString1="29692E72") returned="29692E72" [0075.551] lstrlenW (lpString="29692E72") returned 8 [0075.551] lstrcpynW (in: lpString1=0x40a5f0, lpString2="29692E72", iMaxLength=1024 | out: lpString1="29692E72") returned="29692E72" [0075.551] lstrlenW (lpString="29692E72") returned 8 [0075.551] lstrcpynW (in: lpString1=0x46b000, lpString2="72", iMaxLength=1024 | out: lpString1="72") returned="72" [0075.551] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.551] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.551] lstrlenW (lpString="") returned 0 [0075.551] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.551] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.551] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.551] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.551] lstrcpynW (in: lpString1=0x432ea4, lpString2="72", iMaxLength=1024 | out: lpString1="72") returned="72" [0075.551] lstrlenW (lpString="72") returned 2 [0075.551] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="r") returned 1 [0075.551] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.551] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.551] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.551] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.551] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.551] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.551] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.551] lstrcpynW (in: lpString1=0x432ea0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0075.551] lstrlenW (lpString="r") returned 1 [0075.552] lstrcpynW (in: lpString1=0x40b5f0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0075.552] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.552] lstrcmpiW (lpString1="r", lpString2="^") returned 1 [0075.552] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.552] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.552] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.552] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.552] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.552] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.552] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.552] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.552] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i." [0075.552] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.") returned 51 [0075.552] lstrcpynW (in: lpString1=0x432f06, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0075.552] lstrlenW (lpString="r") returned 1 [0075.552] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.r", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.r") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.r" [0075.552] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.r") returned 52 [0075.552] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.r", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.r") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.r" [0075.552] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.552] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.553] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.553] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.553] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.553] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.553] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.553] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.553] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.553] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.553] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.553] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.553] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.554] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.554] lstrlenW (lpString="C:\\Windows") returned 10 [0075.554] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.554] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.554] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.554] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.554] lstrlenW (lpString="524386") returned 6 [0075.554] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.554] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.554] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.554] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.554] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.554] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.554] lstrlenW (lpString="6") returned 1 [0075.554] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.554] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.554] lstrlenW (lpString="8") returned 1 [0075.554] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.554] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.555] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.555] lstrlenW (lpString="Execute: ") returned 9 [0075.555] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.555] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.555] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.555] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x3b [0075.555] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x3b [0075.556] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x3b, lParam=0x0) returned 0x1 [0075.556] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.556] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.556] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.556] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.556] lstrcpynW (in: lpString1=0x432ea0, lpString2="368", iMaxLength=1024 | out: lpString1="368") returned="368" [0075.556] lstrlenW (lpString="368") returned 3 [0075.556] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="376") returned 3 [0075.556] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.556] lstrlenW (lpString="") returned 0 [0075.556] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.556] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.556] lstrcpynW (in: lpString1=0x432ea0, lpString2="376", iMaxLength=1024 | out: lpString1="376") returned="376" [0075.556] lstrlenW (lpString="376") returned 3 [0075.556] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0075.556] lstrlenW (lpString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returned 1023 [0075.556] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.557] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.557] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.557] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.557] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.557] lstrcpynW (in: lpString1=0x432ea4, lpString2="C6D6BECD", iMaxLength=1024 | out: lpString1="C6D6BECD") returned="C6D6BECD" [0075.557] lstrlenW (lpString="C6D6BECD") returned 8 [0075.557] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="861850449") returned 9 [0075.557] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.557] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.557] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.557] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.557] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.557] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.557] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.558] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.558] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.558] lstrcpynW (in: lpString1=0x432ea0, lpString2="861850449", iMaxLength=1024 | out: lpString1="861850449") returned="861850449" [0075.558] lstrlenW (lpString="861850449") returned 9 [0075.558] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="335ECB51") returned 8 [0075.558] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.558] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.558] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.558] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.558] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.558] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.558] lstrlenW (lpString="0") returned 1 [0075.558] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.558] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.558] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.558] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.558] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.558] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="3") returned 1 [0075.558] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.559] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.559] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.559] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.559] lstrcmpiW (lpString1="3", lpString2="^") returned 1 [0075.559] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.559] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.559] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.559] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.559] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.559] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.559] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.559] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.559] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.r", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.r") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.r" [0075.559] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.r") returned 52 [0075.559] lstrcpynW (in: lpString1=0x432f08, lpString2="3", iMaxLength=1024 | out: lpString1="3") returned="3" [0075.559] lstrlenW (lpString="3") returned 1 [0075.560] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.r3", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.r3") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.r3" [0075.560] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.r3") returned 53 [0075.560] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.r3", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.r3") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.r3" [0075.560] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.560] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.560] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.560] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.560] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.560] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.560] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.560] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.560] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.560] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.560] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.561] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.561] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.561] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.561] lstrlenW (lpString="C:\\Windows") returned 10 [0075.561] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.561] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.561] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.561] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.561] lstrlenW (lpString="524386") returned 6 [0075.561] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.561] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.561] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.561] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.561] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.561] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.561] lstrlenW (lpString="0") returned 1 [0075.561] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.561] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.561] lstrlenW (lpString="2") returned 1 [0075.561] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.561] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.561] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.562] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.562] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.562] lstrlenW (lpString="2") returned 1 [0075.562] lstrcpynW (in: lpString1=0x432ea0, lpString2="335ECB51", iMaxLength=1024 | out: lpString1="335ECB51") returned="335ECB51" [0075.562] lstrlenW (lpString="335ECB51") returned 8 [0075.562] lstrcpynW (in: lpString1=0x40a5f0, lpString2="335ECB51", iMaxLength=1024 | out: lpString1="335ECB51") returned="335ECB51" [0075.562] lstrlenW (lpString="335ECB51") returned 8 [0075.562] lstrcpynW (in: lpString1=0x46b000, lpString2="5ECB51", iMaxLength=1024 | out: lpString1="5ECB51") returned="5ECB51" [0075.562] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.562] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.562] lstrlenW (lpString="") returned 0 [0075.562] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.562] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.562] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.562] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.562] lstrcpynW (in: lpString1=0x432ea4, lpString2="5E", iMaxLength=1024 | out: lpString1="5E") returned="5E" [0075.562] lstrlenW (lpString="5E") returned 2 [0075.562] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="^") returned 1 [0075.562] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.562] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.562] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.562] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.562] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.562] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.562] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.563] lstrcpynW (in: lpString1=0x432ea0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.563] lstrlenW (lpString="^") returned 1 [0075.563] lstrcpynW (in: lpString1=0x40b5f0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.563] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.563] lstrcmpiW (lpString1="^", lpString2="^") returned 0 [0075.563] lstrcpynW (in: lpString1=0x432ea0, lpString2="376", iMaxLength=1024 | out: lpString1="376") returned="376" [0075.563] lstrlenW (lpString="376") returned 3 [0075.563] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.563] lstrlenW (lpString="2") returned 1 [0075.563] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="378") returned 3 [0075.563] lstrcpynW (in: lpString1=0x432ea0, lpString2="378", iMaxLength=1024 | out: lpString1="378") returned="378" [0075.563] lstrlenW (lpString="378") returned 3 [0075.563] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="380") returned 3 [0075.563] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0075.563] lstrcpynW (in: lpString1=0x40b5f0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0075.563] lstrcpynW (in: lpString1=0x40bdf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.563] lstrcmpiW (lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", lpString2="") returned 1 [0075.563] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0075.563] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" [0075.563] lstrcpynW (in: lpString1=0x40a5f0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" [0075.563] CreateFileW (lpFileName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\nszc5ad.tmp\\system.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0xffffffff [0075.564] lstrcpynW (in: lpString1=0x42c248, lpString2="Skipped: ", iMaxLength=1024 | out: lpString1="Skipped: ") returned="Skipped: " [0075.564] lstrlenW (lpString="Skipped: ") returned 9 [0075.564] lstrlenW (lpString="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned 59 [0075.564] lstrcatW (in: lpString1="Skipped: ", lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" | out: lpString1="Skipped: C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned="Skipped: C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" [0075.564] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.r3", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.r3") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.r3" [0075.564] lstrlenW (lpString="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.r3") returned 53 [0075.564] lstrcpynW (in: lpString1=0x33d454, lpString2="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.r3", iMaxLength=1024 | out: lpString1="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.r3") returned="KERNEL32::SetFilePointer(i r5, i 16000 , i 0,i 0)i.r3" [0075.564] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0075.564] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" [0075.564] lstrcpynW (in: lpString1=0x40a5f0, lpString2="Call", iMaxLength=1024 | out: lpString1="Call") returned="Call" [0075.564] GetModuleHandleW (lpModuleName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned 0x74ad0000 [0075.564] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Call", cchWideChar=-1, lpMultiByteStr=0x2dff86c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Call", lpUsedDefaultChar=0x0) returned 5 [0075.564] GetProcAddress (hModule=0x74ad0000, lpProcName="Call") returned 0x74ad1817 [0075.564] lstrcpyW (in: lpString1=0x33e468, lpString2="KERNEL32" | out: lpString1="KERNEL32") returned="KERNEL32" [0075.564] lstrcpyW (in: lpString1=0x33ec78, lpString2="KERNEL32" | out: lpString1="KERNEL32") returned="KERNEL32" [0075.564] lstrcpyW (in: lpString1=0x33f478, lpString2="SetFilePointer" | out: lpString1="SetFilePointer") returned="SetFilePointer" [0075.566] GetModuleHandleW (lpModuleName="KERNEL32") returned 0x75620000 [0075.566] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SetFilePointer", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0075.566] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SetFilePointer", cchWideChar=-1, lpMultiByteStr=0x339128, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SetFilePointer", lpUsedDefaultChar=0x0) returned 15 [0075.566] GetProcAddress (hModule=0x75620000, lpProcName="SetFilePointer") returned 0x756317b1 [0075.566] lstrcpynW (in: lpString1=0x33d450, lpString2="464", iMaxLength=1024 | out: lpString1="464") returned="464" [0075.567] lstrcpynW (in: lpString1=0x33d450, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.567] SetFilePointer (in: hFile=0x1d0, lDistanceToMove=16000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x3e80 [0075.567] wsprintfW (in: param_1=0x33d450, param_2="%d" | out: param_1="0") returned 1 [0075.567] wsprintfW (in: param_1=0x33d450, param_2="%d" | out: param_1="0") returned 1 [0075.567] wsprintfW (in: param_1=0x33d450, param_2="%d" | out: param_1="16000") returned 5 [0075.567] wsprintfW (in: param_1=0x33d450, param_2="%d" | out: param_1="464") returned 3 [0075.567] wsprintfW (in: param_1=0x33d450, param_2="%d" | out: param_1="16000") returned 5 [0075.567] lstrcpyW (in: lpString1=0x437800, lpString2="16000" | out: lpString1="16000") returned="16000" [0075.568] lstrcpynW (in: lpString1=0x40a5f0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.568] lstrlenW (lpString="") returned 0 [0075.568] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.568] lstrlenW (lpString="") returned 0 [0075.568] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.568] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.568] lstrcpynW (in: lpString1=0x432ea0, lpString2="380", iMaxLength=1024 | out: lpString1="380") returned="380" [0075.568] lstrlenW (lpString="380") returned 3 [0075.568] lstrcpynW (in: lpString1=0x432ea0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0075.568] lstrlenW (lpString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returned 1023 [0075.568] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.568] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned="BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0075.569] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.569] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.569] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.569] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.569] lstrcpynW (in: lpString1=0x432ea4, lpString2="BECD27D2", iMaxLength=1024 | out: lpString1="BECD27D2") returned="BECD27D2" [0075.569] lstrlenW (lpString="BECD27D2") returned 8 [0075.569] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1262834254") returned 10 [0075.569] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.569] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.569] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.569] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.569] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.569] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.569] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.570] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.570] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.570] lstrcpynW (in: lpString1=0x432ea0, lpString2="1262834254", iMaxLength=1024 | out: lpString1="1262834254") returned="1262834254" [0075.570] lstrlenW (lpString="1262834254") returned 10 [0075.570] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="4B45524E") returned 8 [0075.570] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.570] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.570] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.570] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.570] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.570] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.570] lstrlenW (lpString="0") returned 1 [0075.571] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.571] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.571] lstrlenW (lpString="0") returned 1 [0075.571] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.571] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.571] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.571] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.571] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.571] lstrlenW (lpString="0") returned 1 [0075.571] lstrcpynW (in: lpString1=0x432ea0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0075.571] lstrlenW (lpString="4B45524E") returned 8 [0075.571] lstrcpynW (in: lpString1=0x40a5f0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0075.571] lstrlenW (lpString="4B45524E") returned 8 [0075.571] lstrcpynW (in: lpString1=0x46b000, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0075.571] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.571] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.571] lstrlenW (lpString="") returned 0 [0075.571] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.571] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.571] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.571] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.571] lstrcpynW (in: lpString1=0x432ea4, lpString2="4B", iMaxLength=1024 | out: lpString1="4B") returned="4B" [0075.571] lstrlenW (lpString="4B") returned 2 [0075.571] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="K") returned 1 [0075.571] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.571] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.571] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.572] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.572] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.572] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.572] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.572] lstrcpynW (in: lpString1=0x432ea0, lpString2="K", iMaxLength=1024 | out: lpString1="K") returned="K" [0075.572] lstrlenW (lpString="K") returned 1 [0075.572] lstrcpynW (in: lpString1=0x40b5f0, lpString2="K", iMaxLength=1024 | out: lpString1="K") returned="K" [0075.572] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.572] lstrcmpiW (lpString1="K", lpString2="^") returned 1 [0075.572] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.572] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.572] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.572] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.572] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.572] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.572] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.573] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.573] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.573] lstrlenW (lpString="") returned 0 [0075.573] lstrcpynW (in: lpString1=0x432ea0, lpString2="K", iMaxLength=1024 | out: lpString1="K") returned="K" [0075.573] lstrlenW (lpString="K") returned 1 [0075.573] lstrcpynW (in: lpString1=0x40a5f0, lpString2="K", iMaxLength=1024 | out: lpString1="K") returned="K" [0075.573] lstrlenW (lpString="K") returned 1 [0075.573] lstrcpynW (in: lpString1=0x46c000, lpString2="K", iMaxLength=1024 | out: lpString1="K") returned="K" [0075.573] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.573] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.573] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.573] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.573] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.573] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.573] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.573] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.573] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.573] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.574] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.574] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.574] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.574] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.574] lstrlenW (lpString="C:\\Windows") returned 10 [0075.574] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.574] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.574] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.574] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.574] lstrlenW (lpString="524386") returned 6 [0075.574] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.574] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.574] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.574] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.574] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.574] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.574] lstrlenW (lpString="0") returned 1 [0075.575] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.575] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.575] lstrlenW (lpString="2") returned 1 [0075.575] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.575] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.575] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.575] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.575] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.575] lstrlenW (lpString="2") returned 1 [0075.575] lstrcpynW (in: lpString1=0x432ea0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0075.575] lstrlenW (lpString="4B45524E") returned 8 [0075.575] lstrcpynW (in: lpString1=0x40a5f0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0075.575] lstrlenW (lpString="4B45524E") returned 8 [0075.575] lstrcpynW (in: lpString1=0x46b000, lpString2="45524E", iMaxLength=1024 | out: lpString1="45524E") returned="45524E" [0075.575] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.575] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.575] lstrlenW (lpString="") returned 0 [0075.575] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.575] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.575] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.575] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.575] lstrcpynW (in: lpString1=0x432ea4, lpString2="45", iMaxLength=1024 | out: lpString1="45") returned="45" [0075.575] lstrlenW (lpString="45") returned 2 [0075.575] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="E") returned 1 [0075.575] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.575] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.575] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.575] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.576] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.576] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.576] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.576] lstrcpynW (in: lpString1=0x432ea0, lpString2="E", iMaxLength=1024 | out: lpString1="E") returned="E" [0075.576] lstrlenW (lpString="E") returned 1 [0075.576] lstrcpynW (in: lpString1=0x40b5f0, lpString2="E", iMaxLength=1024 | out: lpString1="E") returned="E" [0075.576] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.576] lstrcmpiW (lpString1="E", lpString2="^") returned 1 [0075.576] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.576] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.576] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.576] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.576] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.576] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.576] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.577] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.577] lstrcpynW (in: lpString1=0x432ea0, lpString2="K", iMaxLength=1024 | out: lpString1="K") returned="K" [0075.577] lstrlenW (lpString="K") returned 1 [0075.577] lstrcpynW (in: lpString1=0x432ea2, lpString2="E", iMaxLength=1024 | out: lpString1="E") returned="E" [0075.577] lstrlenW (lpString="E") returned 1 [0075.577] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KE", iMaxLength=1024 | out: lpString1="KE") returned="KE" [0075.577] lstrlenW (lpString="KE") returned 2 [0075.577] lstrcpynW (in: lpString1=0x46c000, lpString2="KE", iMaxLength=1024 | out: lpString1="KE") returned="KE" [0075.577] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.577] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.577] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.577] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.577] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.577] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.577] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.577] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.578] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.578] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.578] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.578] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.578] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.578] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.578] lstrlenW (lpString="C:\\Windows") returned 10 [0075.578] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.578] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.578] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.578] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.578] lstrlenW (lpString="524386") returned 6 [0075.578] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.578] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.578] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.579] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.579] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.579] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.579] lstrlenW (lpString="2") returned 1 [0075.579] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.579] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.579] lstrlenW (lpString="4") returned 1 [0075.579] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.579] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.579] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.579] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.579] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.579] lstrlenW (lpString="4") returned 1 [0075.579] lstrcpynW (in: lpString1=0x432ea0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0075.579] lstrlenW (lpString="4B45524E") returned 8 [0075.579] lstrcpynW (in: lpString1=0x40a5f0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0075.579] lstrlenW (lpString="4B45524E") returned 8 [0075.580] lstrcpynW (in: lpString1=0x46b000, lpString2="524E", iMaxLength=1024 | out: lpString1="524E") returned="524E" [0075.580] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.580] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.580] lstrlenW (lpString="") returned 0 [0075.580] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.580] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.580] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.580] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.580] lstrcpynW (in: lpString1=0x432ea4, lpString2="52", iMaxLength=1024 | out: lpString1="52") returned="52" [0075.581] lstrlenW (lpString="52") returned 2 [0075.581] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="R") returned 1 [0075.581] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.581] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.581] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.581] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.581] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.581] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.582] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.582] lstrcpynW (in: lpString1=0x432ea0, lpString2="R", iMaxLength=1024 | out: lpString1="R") returned="R" [0075.582] lstrlenW (lpString="R") returned 1 [0075.582] lstrcpynW (in: lpString1=0x40b5f0, lpString2="R", iMaxLength=1024 | out: lpString1="R") returned="R" [0075.582] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.582] lstrcmpiW (lpString1="R", lpString2="^") returned 1 [0075.582] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.582] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.582] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.582] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.582] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.582] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.582] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.582] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.582] lstrcpynW (in: lpString1=0x432ea0, lpString2="KE", iMaxLength=1024 | out: lpString1="KE") returned="KE" [0075.582] lstrlenW (lpString="KE") returned 2 [0075.582] lstrcpynW (in: lpString1=0x432ea4, lpString2="R", iMaxLength=1024 | out: lpString1="R") returned="R" [0075.582] lstrlenW (lpString="R") returned 1 [0075.583] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KER", iMaxLength=1024 | out: lpString1="KER") returned="KER" [0075.583] lstrlenW (lpString="KER") returned 3 [0075.583] lstrcpynW (in: lpString1=0x46c000, lpString2="KER", iMaxLength=1024 | out: lpString1="KER") returned="KER" [0075.583] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.583] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.583] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.583] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.583] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.583] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.583] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.583] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.583] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.583] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.583] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.584] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.584] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.584] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.584] lstrlenW (lpString="C:\\Windows") returned 10 [0075.584] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.584] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.584] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.584] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.584] lstrlenW (lpString="524386") returned 6 [0075.584] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.584] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.584] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.584] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.584] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.584] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.584] lstrlenW (lpString="4") returned 1 [0075.584] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.584] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.584] lstrlenW (lpString="6") returned 1 [0075.584] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.584] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.585] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.585] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.585] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.585] lstrlenW (lpString="6") returned 1 [0075.585] lstrcpynW (in: lpString1=0x432ea0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0075.585] lstrlenW (lpString="4B45524E") returned 8 [0075.585] lstrcpynW (in: lpString1=0x40a5f0, lpString2="4B45524E", iMaxLength=1024 | out: lpString1="4B45524E") returned="4B45524E" [0075.585] lstrlenW (lpString="4B45524E") returned 8 [0075.585] lstrcpynW (in: lpString1=0x46b000, lpString2="4E", iMaxLength=1024 | out: lpString1="4E") returned="4E" [0075.585] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.585] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.585] lstrlenW (lpString="") returned 0 [0075.585] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.585] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.585] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.585] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.585] lstrcpynW (in: lpString1=0x432ea4, lpString2="4E", iMaxLength=1024 | out: lpString1="4E") returned="4E" [0075.585] lstrlenW (lpString="4E") returned 2 [0075.585] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="N") returned 1 [0075.585] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.585] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.585] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.585] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.585] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.585] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.585] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.586] lstrcpynW (in: lpString1=0x432ea0, lpString2="N", iMaxLength=1024 | out: lpString1="N") returned="N" [0075.586] lstrlenW (lpString="N") returned 1 [0075.586] lstrcpynW (in: lpString1=0x40b5f0, lpString2="N", iMaxLength=1024 | out: lpString1="N") returned="N" [0075.586] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.586] lstrcmpiW (lpString1="N", lpString2="^") returned 1 [0075.586] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.586] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.586] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.586] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.586] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.586] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.586] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.586] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.586] lstrcpynW (in: lpString1=0x432ea0, lpString2="KER", iMaxLength=1024 | out: lpString1="KER") returned="KER" [0075.586] lstrlenW (lpString="KER") returned 3 [0075.586] lstrcpynW (in: lpString1=0x432ea6, lpString2="N", iMaxLength=1024 | out: lpString1="N") returned="N" [0075.587] lstrlenW (lpString="N") returned 1 [0075.587] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERN", iMaxLength=1024 | out: lpString1="KERN") returned="KERN" [0075.587] lstrlenW (lpString="KERN") returned 4 [0075.587] lstrcpynW (in: lpString1=0x46c000, lpString2="KERN", iMaxLength=1024 | out: lpString1="KERN") returned="KERN" [0075.587] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.587] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.587] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.587] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.587] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.587] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.587] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.587] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.587] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.587] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.588] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.588] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.588] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.588] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.588] lstrlenW (lpString="C:\\Windows") returned 10 [0075.588] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.588] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.588] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.588] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.588] lstrlenW (lpString="524386") returned 6 [0075.588] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.588] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.588] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.588] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.588] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.589] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.589] lstrlenW (lpString="6") returned 1 [0075.589] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.589] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.589] lstrlenW (lpString="8") returned 1 [0075.589] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.589] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.589] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.589] lstrlenW (lpString="Execute: ") returned 9 [0075.589] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.589] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.589] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.589] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x3c [0075.589] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x3c [0075.590] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x3c, lParam=0x0) returned 0x1 [0075.590] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.590] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.590] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.590] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.590] lstrcpynW (in: lpString1=0x432ea0, lpString2="380", iMaxLength=1024 | out: lpString1="380") returned="380" [0075.590] lstrlenW (lpString="380") returned 3 [0075.590] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="388") returned 3 [0075.590] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.590] lstrlenW (lpString="") returned 0 [0075.590] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.591] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.591] lstrcpynW (in: lpString1=0x432ea0, lpString2="388", iMaxLength=1024 | out: lpString1="388") returned="388" [0075.591] lstrlenW (lpString="388") returned 3 [0075.591] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.591] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0075.591] lstrlenW (lpString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returned 1023 [0075.591] lstrcpynW (in: lpString1=0x46d000, lpString2="B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString1="B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.591] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.591] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.591] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.591] lstrcpynW (in: lpString1=0x432ea4, lpString2="B0C446AE", iMaxLength=1024 | out: lpString1="B0C446AE") returned="B0C446AE" [0075.591] lstrlenW (lpString="B0C446AE") returned 8 [0075.591] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1162621746") returned 10 [0075.591] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.591] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.591] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.591] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.592] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.592] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.592] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.592] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.592] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.592] lstrcpynW (in: lpString1=0x432ea0, lpString2="1162621746", iMaxLength=1024 | out: lpString1="1162621746") returned="1162621746" [0075.592] lstrlenW (lpString="1162621746") returned 10 [0075.592] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="454C3332") returned 8 [0075.592] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.592] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.592] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.592] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.592] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.592] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.592] lstrlenW (lpString="0") returned 1 [0075.592] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.593] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.593] lstrlenW (lpString="0") returned 1 [0075.593] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.593] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.593] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.593] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.593] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.593] lstrlenW (lpString="0") returned 1 [0075.593] lstrcpynW (in: lpString1=0x432ea0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0075.593] lstrlenW (lpString="454C3332") returned 8 [0075.593] lstrcpynW (in: lpString1=0x40a5f0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0075.593] lstrlenW (lpString="454C3332") returned 8 [0075.593] lstrcpynW (in: lpString1=0x46b000, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0075.593] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.593] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.593] lstrlenW (lpString="") returned 0 [0075.593] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.593] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.593] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.593] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.593] lstrcpynW (in: lpString1=0x432ea4, lpString2="45", iMaxLength=1024 | out: lpString1="45") returned="45" [0075.593] lstrlenW (lpString="45") returned 2 [0075.593] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="E") returned 1 [0075.593] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.593] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.593] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.594] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.594] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.594] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.594] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.594] lstrcpynW (in: lpString1=0x432ea0, lpString2="E", iMaxLength=1024 | out: lpString1="E") returned="E" [0075.594] lstrlenW (lpString="E") returned 1 [0075.594] lstrcpynW (in: lpString1=0x40b5f0, lpString2="E", iMaxLength=1024 | out: lpString1="E") returned="E" [0075.594] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.594] lstrcmpiW (lpString1="E", lpString2="^") returned 1 [0075.594] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.594] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.594] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.594] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.594] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.594] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.594] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.594] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.594] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERN", iMaxLength=1024 | out: lpString1="KERN") returned="KERN" [0075.595] lstrlenW (lpString="KERN") returned 4 [0075.595] lstrcpynW (in: lpString1=0x432ea8, lpString2="E", iMaxLength=1024 | out: lpString1="E") returned="E" [0075.595] lstrlenW (lpString="E") returned 1 [0075.595] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNE", iMaxLength=1024 | out: lpString1="KERNE") returned="KERNE" [0075.595] lstrlenW (lpString="KERNE") returned 5 [0075.595] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNE", iMaxLength=1024 | out: lpString1="KERNE") returned="KERNE" [0075.595] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.595] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.595] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.595] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.595] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.595] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.595] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.595] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.595] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.595] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.596] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.596] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.596] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.596] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.596] lstrlenW (lpString="C:\\Windows") returned 10 [0075.596] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.596] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.596] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.596] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.596] lstrlenW (lpString="524386") returned 6 [0075.596] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.596] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.596] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.596] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.596] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.596] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.596] lstrlenW (lpString="0") returned 1 [0075.597] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.597] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.597] lstrlenW (lpString="2") returned 1 [0075.597] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.597] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.597] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.597] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.597] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.597] lstrlenW (lpString="2") returned 1 [0075.597] lstrcpynW (in: lpString1=0x432ea0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0075.597] lstrlenW (lpString="454C3332") returned 8 [0075.597] lstrcpynW (in: lpString1=0x40a5f0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0075.597] lstrlenW (lpString="454C3332") returned 8 [0075.597] lstrcpynW (in: lpString1=0x46b000, lpString2="4C3332", iMaxLength=1024 | out: lpString1="4C3332") returned="4C3332" [0075.597] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.597] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.597] lstrlenW (lpString="") returned 0 [0075.597] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.597] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.597] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.597] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.597] lstrcpynW (in: lpString1=0x432ea4, lpString2="4C", iMaxLength=1024 | out: lpString1="4C") returned="4C" [0075.597] lstrlenW (lpString="4C") returned 2 [0075.597] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="L") returned 1 [0075.597] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.597] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.597] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.597] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.598] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.598] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.598] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.598] lstrcpynW (in: lpString1=0x432ea0, lpString2="L", iMaxLength=1024 | out: lpString1="L") returned="L" [0075.598] lstrlenW (lpString="L") returned 1 [0075.598] lstrcpynW (in: lpString1=0x40b5f0, lpString2="L", iMaxLength=1024 | out: lpString1="L") returned="L" [0075.598] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.598] lstrcmpiW (lpString1="L", lpString2="^") returned 1 [0075.598] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.598] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.598] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.598] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.598] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.598] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.598] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.598] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.599] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNE", iMaxLength=1024 | out: lpString1="KERNE") returned="KERNE" [0075.599] lstrlenW (lpString="KERNE") returned 5 [0075.599] lstrcpynW (in: lpString1=0x432eaa, lpString2="L", iMaxLength=1024 | out: lpString1="L") returned="L" [0075.599] lstrlenW (lpString="L") returned 1 [0075.599] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL", iMaxLength=1024 | out: lpString1="KERNEL") returned="KERNEL" [0075.599] lstrlenW (lpString="KERNEL") returned 6 [0075.599] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL", iMaxLength=1024 | out: lpString1="KERNEL") returned="KERNEL" [0075.599] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.599] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.599] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.599] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.599] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.599] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.599] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.599] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.599] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.599] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.600] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.600] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.600] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.600] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.600] lstrlenW (lpString="C:\\Windows") returned 10 [0075.600] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.600] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.600] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.600] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.600] lstrlenW (lpString="524386") returned 6 [0075.600] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.600] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.600] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.600] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.600] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.600] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.600] lstrlenW (lpString="2") returned 1 [0075.601] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.601] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.601] lstrlenW (lpString="4") returned 1 [0075.601] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.601] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.601] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.601] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.601] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.601] lstrlenW (lpString="4") returned 1 [0075.601] lstrcpynW (in: lpString1=0x432ea0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0075.601] lstrlenW (lpString="454C3332") returned 8 [0075.601] lstrcpynW (in: lpString1=0x40a5f0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0075.601] lstrlenW (lpString="454C3332") returned 8 [0075.601] lstrcpynW (in: lpString1=0x46b000, lpString2="3332", iMaxLength=1024 | out: lpString1="3332") returned="3332" [0075.601] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.601] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.601] lstrlenW (lpString="") returned 0 [0075.601] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.601] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.601] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.601] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.601] lstrcpynW (in: lpString1=0x432ea4, lpString2="33", iMaxLength=1024 | out: lpString1="33") returned="33" [0075.601] lstrlenW (lpString="33") returned 2 [0075.601] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="3") returned 1 [0075.603] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.603] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.603] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.603] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.603] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.603] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.603] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.603] lstrcpynW (in: lpString1=0x432ea0, lpString2="3", iMaxLength=1024 | out: lpString1="3") returned="3" [0075.604] lstrlenW (lpString="3") returned 1 [0075.604] lstrcpynW (in: lpString1=0x40b5f0, lpString2="3", iMaxLength=1024 | out: lpString1="3") returned="3" [0075.604] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.604] lstrcmpiW (lpString1="3", lpString2="^") returned 1 [0075.604] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.604] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.604] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.604] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.604] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.604] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.604] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.604] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.604] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL", iMaxLength=1024 | out: lpString1="KERNEL") returned="KERNEL" [0075.604] lstrlenW (lpString="KERNEL") returned 6 [0075.604] lstrcpynW (in: lpString1=0x432eac, lpString2="3", iMaxLength=1024 | out: lpString1="3") returned="3" [0075.604] lstrlenW (lpString="3") returned 1 [0075.604] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL3", iMaxLength=1024 | out: lpString1="KERNEL3") returned="KERNEL3" [0075.604] lstrlenW (lpString="KERNEL3") returned 7 [0075.604] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL3", iMaxLength=1024 | out: lpString1="KERNEL3") returned="KERNEL3" [0075.604] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.605] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.605] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.605] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.605] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.605] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.605] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.605] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.605] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.605] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.605] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.605] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.605] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.605] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.606] lstrlenW (lpString="C:\\Windows") returned 10 [0075.606] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.606] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.606] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.606] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.606] lstrlenW (lpString="524386") returned 6 [0075.606] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.606] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.606] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.606] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.606] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.606] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.606] lstrlenW (lpString="4") returned 1 [0075.606] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.606] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.606] lstrlenW (lpString="6") returned 1 [0075.606] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.606] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.606] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.606] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.606] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.606] lstrlenW (lpString="6") returned 1 [0075.606] lstrcpynW (in: lpString1=0x432ea0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0075.606] lstrlenW (lpString="454C3332") returned 8 [0075.607] lstrcpynW (in: lpString1=0x40a5f0, lpString2="454C3332", iMaxLength=1024 | out: lpString1="454C3332") returned="454C3332" [0075.607] lstrlenW (lpString="454C3332") returned 8 [0075.607] lstrcpynW (in: lpString1=0x46b000, lpString2="32", iMaxLength=1024 | out: lpString1="32") returned="32" [0075.607] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.607] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.607] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.607] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="2") returned 1 [0075.607] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.607] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.607] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.607] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.607] lstrcmpiW (lpString1="2", lpString2="^") returned 1 [0075.607] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.607] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.607] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.607] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.607] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.608] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.700] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.700] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.701] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL3", iMaxLength=1024 | out: lpString1="KERNEL3") returned="KERNEL3" [0075.701] lstrlenW (lpString="KERNEL3") returned 7 [0075.701] lstrcpynW (in: lpString1=0x432eae, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.701] lstrlenW (lpString="2") returned 1 [0075.701] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32", iMaxLength=1024 | out: lpString1="KERNEL32") returned="KERNEL32" [0075.701] lstrlenW (lpString="KERNEL32") returned 8 [0075.701] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32", iMaxLength=1024 | out: lpString1="KERNEL32") returned="KERNEL32" [0075.701] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.701] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.701] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.701] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.701] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.702] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.702] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.702] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.702] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.702] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.702] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.702] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.702] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.703] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.703] lstrlenW (lpString="C:\\Windows") returned 10 [0075.703] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.703] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.703] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.703] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.703] lstrlenW (lpString="524386") returned 6 [0075.703] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.703] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.703] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.703] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.703] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.703] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.704] lstrlenW (lpString="6") returned 1 [0075.704] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.704] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.704] lstrlenW (lpString="8") returned 1 [0075.704] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.704] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.704] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.704] lstrlenW (lpString="Execute: ") returned 9 [0075.704] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.704] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.704] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.704] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x3d [0075.705] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x3d [0075.705] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x3d, lParam=0x0) returned 0x1 [0075.706] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.706] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.706] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.706] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.707] lstrcpynW (in: lpString1=0x432ea0, lpString2="388", iMaxLength=1024 | out: lpString1="388") returned="388" [0075.707] lstrlenW (lpString="388") returned 3 [0075.707] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="396") returned 3 [0075.707] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.707] lstrlenW (lpString="") returned 0 [0075.707] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.707] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.707] lstrcpynW (in: lpString1=0x432ea0, lpString2="396", iMaxLength=1024 | out: lpString1="396") returned="396" [0075.707] lstrlenW (lpString="396") returned 3 [0075.707] lstrcpynW (in: lpString1=0x432ea0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.707] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.707] lstrcpynW (in: lpString1=0x46d000, lpString2="CFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned="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" [0075.707] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.707] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.707] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.708] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.708] lstrcpynW (in: lpString1=0x432ea4, lpString2="CFB227F9", iMaxLength=1024 | out: lpString1="CFB227F9") returned="CFB227F9" [0075.708] lstrlenW (lpString="CFB227F9") returned 8 [0075.708] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="976900709") returned 9 [0075.708] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.708] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.708] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.708] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.708] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.708] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.708] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.709] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.709] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.709] lstrcpynW (in: lpString1=0x432ea0, lpString2="976900709", iMaxLength=1024 | out: lpString1="976900709") returned="976900709" [0075.709] lstrlenW (lpString="976900709") returned 9 [0075.709] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="3A3A5265") returned 8 [0075.709] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.709] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.709] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.709] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.709] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.710] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.710] lstrlenW (lpString="0") returned 1 [0075.710] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.710] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.710] lstrlenW (lpString="0") returned 1 [0075.710] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.710] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.710] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.710] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.710] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.710] lstrlenW (lpString="0") returned 1 [0075.710] lstrcpynW (in: lpString1=0x432ea0, lpString2="3A3A5265", iMaxLength=1024 | out: lpString1="3A3A5265") returned="3A3A5265" [0075.710] lstrlenW (lpString="3A3A5265") returned 8 [0075.710] lstrcpynW (in: lpString1=0x40a5f0, lpString2="3A3A5265", iMaxLength=1024 | out: lpString1="3A3A5265") returned="3A3A5265" [0075.710] lstrlenW (lpString="3A3A5265") returned 8 [0075.710] lstrcpynW (in: lpString1=0x46b000, lpString2="3A3A5265", iMaxLength=1024 | out: lpString1="3A3A5265") returned="3A3A5265" [0075.710] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.710] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.710] lstrlenW (lpString="") returned 0 [0075.710] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.710] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.710] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.710] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.711] lstrcpynW (in: lpString1=0x432ea4, lpString2="3A", iMaxLength=1024 | out: lpString1="3A") returned="3A" [0075.711] lstrlenW (lpString="3A") returned 2 [0075.711] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=":") returned 1 [0075.711] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.711] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.711] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.711] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.711] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.711] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.711] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.711] lstrcpynW (in: lpString1=0x432ea0, lpString2=":", iMaxLength=1024 | out: lpString1=":") returned=":" [0075.711] lstrlenW (lpString=":") returned 1 [0075.711] lstrcpynW (in: lpString1=0x40b5f0, lpString2=":", iMaxLength=1024 | out: lpString1=":") returned=":" [0075.712] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.712] lstrcmpiW (lpString1=":", lpString2="^") returned -1 [0075.712] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.712] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.712] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.712] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.712] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.712] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.712] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.712] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.713] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32", iMaxLength=1024 | out: lpString1="KERNEL32") returned="KERNEL32" [0075.713] lstrlenW (lpString="KERNEL32") returned 8 [0075.713] lstrcpynW (in: lpString1=0x432eb0, lpString2=":", iMaxLength=1024 | out: lpString1=":") returned=":" [0075.713] lstrlenW (lpString=":") returned 1 [0075.713] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32:", iMaxLength=1024 | out: lpString1="KERNEL32:") returned="KERNEL32:" [0075.713] lstrlenW (lpString="KERNEL32:") returned 9 [0075.713] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32:", iMaxLength=1024 | out: lpString1="KERNEL32:") returned="KERNEL32:" [0075.713] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.713] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.713] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.713] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.713] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.713] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.713] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.713] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.714] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.714] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.714] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.714] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.714] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.714] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.714] lstrlenW (lpString="C:\\Windows") returned 10 [0075.714] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.714] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.715] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.715] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.715] lstrlenW (lpString="524386") returned 6 [0075.715] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.715] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.715] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.715] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.715] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.715] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.715] lstrlenW (lpString="0") returned 1 [0075.715] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.715] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.715] lstrlenW (lpString="2") returned 1 [0075.715] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.715] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.715] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.715] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.715] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.715] lstrlenW (lpString="2") returned 1 [0075.715] lstrcpynW (in: lpString1=0x432ea0, lpString2="3A3A5265", iMaxLength=1024 | out: lpString1="3A3A5265") returned="3A3A5265" [0075.716] lstrlenW (lpString="3A3A5265") returned 8 [0075.716] lstrcpynW (in: lpString1=0x40a5f0, lpString2="3A3A5265", iMaxLength=1024 | out: lpString1="3A3A5265") returned="3A3A5265" [0075.716] lstrlenW (lpString="3A3A5265") returned 8 [0075.716] lstrcpynW (in: lpString1=0x46b000, lpString2="3A5265", iMaxLength=1024 | out: lpString1="3A5265") returned="3A5265" [0075.716] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.716] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.716] lstrlenW (lpString="") returned 0 [0075.716] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.716] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.716] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.716] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.716] lstrcpynW (in: lpString1=0x432ea4, lpString2="3A", iMaxLength=1024 | out: lpString1="3A") returned="3A" [0075.716] lstrlenW (lpString="3A") returned 2 [0075.716] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=":") returned 1 [0075.716] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.716] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.716] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.716] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.716] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.717] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.717] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.717] lstrcpynW (in: lpString1=0x432ea0, lpString2=":", iMaxLength=1024 | out: lpString1=":") returned=":" [0075.717] lstrlenW (lpString=":") returned 1 [0075.717] lstrcpynW (in: lpString1=0x40b5f0, lpString2=":", iMaxLength=1024 | out: lpString1=":") returned=":" [0075.717] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.717] lstrcmpiW (lpString1=":", lpString2="^") returned -1 [0075.717] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.717] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.717] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.717] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.717] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.717] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.718] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.718] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.718] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32:", iMaxLength=1024 | out: lpString1="KERNEL32:") returned="KERNEL32:" [0075.718] lstrlenW (lpString="KERNEL32:") returned 9 [0075.718] lstrcpynW (in: lpString1=0x432eb2, lpString2=":", iMaxLength=1024 | out: lpString1=":") returned=":" [0075.718] lstrlenW (lpString=":") returned 1 [0075.718] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::", iMaxLength=1024 | out: lpString1="KERNEL32::") returned="KERNEL32::" [0075.718] lstrlenW (lpString="KERNEL32::") returned 10 [0075.718] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::", iMaxLength=1024 | out: lpString1="KERNEL32::") returned="KERNEL32::" [0075.718] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.718] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.718] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.718] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.718] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.719] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.719] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.719] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.719] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.719] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.719] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.719] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.719] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.720] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.720] lstrlenW (lpString="C:\\Windows") returned 10 [0075.720] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.720] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.720] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.720] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.720] lstrlenW (lpString="524386") returned 6 [0075.720] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.720] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.720] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.720] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.720] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.720] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.721] lstrlenW (lpString="2") returned 1 [0075.721] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.721] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.721] lstrlenW (lpString="4") returned 1 [0075.721] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.721] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.721] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.721] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.721] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.721] lstrlenW (lpString="4") returned 1 [0075.721] lstrcpynW (in: lpString1=0x432ea0, lpString2="3A3A5265", iMaxLength=1024 | out: lpString1="3A3A5265") returned="3A3A5265" [0075.721] lstrlenW (lpString="3A3A5265") returned 8 [0075.721] lstrcpynW (in: lpString1=0x40a5f0, lpString2="3A3A5265", iMaxLength=1024 | out: lpString1="3A3A5265") returned="3A3A5265" [0075.721] lstrlenW (lpString="3A3A5265") returned 8 [0075.721] lstrcpynW (in: lpString1=0x46b000, lpString2="5265", iMaxLength=1024 | out: lpString1="5265") returned="5265" [0075.721] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.721] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.721] lstrlenW (lpString="") returned 0 [0075.721] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.721] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.721] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.722] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.722] lstrcpynW (in: lpString1=0x432ea4, lpString2="52", iMaxLength=1024 | out: lpString1="52") returned="52" [0075.722] lstrlenW (lpString="52") returned 2 [0075.722] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="R") returned 1 [0075.722] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.722] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.722] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.722] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.722] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.722] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.722] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.722] lstrcpynW (in: lpString1=0x432ea0, lpString2="R", iMaxLength=1024 | out: lpString1="R") returned="R" [0075.722] lstrlenW (lpString="R") returned 1 [0075.723] lstrcpynW (in: lpString1=0x40b5f0, lpString2="R", iMaxLength=1024 | out: lpString1="R") returned="R" [0075.723] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.723] lstrcmpiW (lpString1="R", lpString2="^") returned 1 [0075.723] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.723] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.723] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.723] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.723] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.723] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.724] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.724] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.724] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::", iMaxLength=1024 | out: lpString1="KERNEL32::") returned="KERNEL32::" [0075.724] lstrlenW (lpString="KERNEL32::") returned 10 [0075.724] lstrcpynW (in: lpString1=0x432eb4, lpString2="R", iMaxLength=1024 | out: lpString1="R") returned="R" [0075.724] lstrlenW (lpString="R") returned 1 [0075.724] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::R", iMaxLength=1024 | out: lpString1="KERNEL32::R") returned="KERNEL32::R" [0075.724] lstrlenW (lpString="KERNEL32::R") returned 11 [0075.724] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::R", iMaxLength=1024 | out: lpString1="KERNEL32::R") returned="KERNEL32::R" [0075.724] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.724] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.724] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.724] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.724] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.724] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.725] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.725] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.725] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.725] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.725] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.725] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.725] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.725] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.725] lstrlenW (lpString="C:\\Windows") returned 10 [0075.725] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.726] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.726] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.726] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.726] lstrlenW (lpString="524386") returned 6 [0075.726] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.726] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.726] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.726] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.726] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.726] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.729] lstrlenW (lpString="4") returned 1 [0075.729] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.729] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.729] lstrlenW (lpString="6") returned 1 [0075.729] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.729] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.729] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.729] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.729] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.729] lstrlenW (lpString="6") returned 1 [0075.729] lstrcpynW (in: lpString1=0x432ea0, lpString2="3A3A5265", iMaxLength=1024 | out: lpString1="3A3A5265") returned="3A3A5265" [0075.729] lstrlenW (lpString="3A3A5265") returned 8 [0075.729] lstrcpynW (in: lpString1=0x40a5f0, lpString2="3A3A5265", iMaxLength=1024 | out: lpString1="3A3A5265") returned="3A3A5265" [0075.729] lstrlenW (lpString="3A3A5265") returned 8 [0075.729] lstrcpynW (in: lpString1=0x46b000, lpString2="65", iMaxLength=1024 | out: lpString1="65") returned="65" [0075.729] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.729] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.729] lstrlenW (lpString="") returned 0 [0075.730] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.730] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.730] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.730] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.730] lstrcpynW (in: lpString1=0x432ea4, lpString2="65", iMaxLength=1024 | out: lpString1="65") returned="65" [0075.730] lstrlenW (lpString="65") returned 2 [0075.730] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="e") returned 1 [0075.730] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.730] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.730] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.730] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.730] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.730] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.730] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.730] lstrcpynW (in: lpString1=0x432ea0, lpString2="e", iMaxLength=1024 | out: lpString1="e") returned="e" [0075.730] lstrlenW (lpString="e") returned 1 [0075.731] lstrcpynW (in: lpString1=0x40b5f0, lpString2="e", iMaxLength=1024 | out: lpString1="e") returned="e" [0075.731] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.731] lstrcmpiW (lpString1="e", lpString2="^") returned 1 [0075.731] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.731] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.731] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.731] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.731] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.731] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.731] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.731] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.732] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::R", iMaxLength=1024 | out: lpString1="KERNEL32::R") returned="KERNEL32::R" [0075.732] lstrlenW (lpString="KERNEL32::R") returned 11 [0075.732] lstrcpynW (in: lpString1=0x432eb6, lpString2="e", iMaxLength=1024 | out: lpString1="e") returned="e" [0075.732] lstrlenW (lpString="e") returned 1 [0075.732] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::Re", iMaxLength=1024 | out: lpString1="KERNEL32::Re") returned="KERNEL32::Re" [0075.732] lstrlenW (lpString="KERNEL32::Re") returned 12 [0075.732] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::Re", iMaxLength=1024 | out: lpString1="KERNEL32::Re") returned="KERNEL32::Re" [0075.732] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.732] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.732] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.732] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.732] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.732] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.732] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.732] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.733] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.733] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.733] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.733] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.733] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.733] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.733] lstrlenW (lpString="C:\\Windows") returned 10 [0075.733] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.733] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.734] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.734] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.734] lstrlenW (lpString="524386") returned 6 [0075.734] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.734] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.734] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.734] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.734] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.734] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.734] lstrlenW (lpString="6") returned 1 [0075.734] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.734] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.734] lstrlenW (lpString="8") returned 1 [0075.734] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.734] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.734] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.734] lstrlenW (lpString="Execute: ") returned 9 [0075.734] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.735] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.735] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.735] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x3e [0075.735] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x3e [0075.735] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x3e, lParam=0x0) returned 0x1 [0075.736] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.736] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.736] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.736] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.736] lstrcpynW (in: lpString1=0x432ea0, lpString2="396", iMaxLength=1024 | out: lpString1="396") returned="396" [0075.736] lstrlenW (lpString="396") returned 3 [0075.736] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="404") returned 3 [0075.736] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.736] lstrlenW (lpString="") returned 0 [0075.736] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.736] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.736] lstrcpynW (in: lpString1=0x432ea0, lpString2="404", iMaxLength=1024 | out: lpString1="404") returned="404" [0075.736] lstrlenW (lpString="404") returned 3 [0075.737] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.737] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.737] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned="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" [0075.737] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.737] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.737] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.737] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.737] lstrcpynW (in: lpString1=0x432ea4, lpString2="94EC33F5", iMaxLength=1024 | out: lpString1="94EC33F5") returned="94EC33F5" [0075.737] lstrlenW (lpString="94EC33F5") returned 8 [0075.737] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1633961577") returned 10 [0075.737] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.737] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.737] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.738] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.738] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.738] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.738] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.738] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.738] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.738] lstrcpynW (in: lpString1=0x432ea0, lpString2="1633961577", iMaxLength=1024 | out: lpString1="1633961577") returned="1633961577" [0075.738] lstrlenW (lpString="1633961577") returned 10 [0075.738] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="61644669") returned 8 [0075.738] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.738] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.738] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.739] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.739] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.739] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.739] lstrlenW (lpString="0") returned 1 [0075.740] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.740] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.740] lstrlenW (lpString="0") returned 1 [0075.740] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.740] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.740] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.740] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.740] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.740] lstrlenW (lpString="0") returned 1 [0075.740] lstrcpynW (in: lpString1=0x432ea0, lpString2="61644669", iMaxLength=1024 | out: lpString1="61644669") returned="61644669" [0075.740] lstrlenW (lpString="61644669") returned 8 [0075.740] lstrcpynW (in: lpString1=0x40a5f0, lpString2="61644669", iMaxLength=1024 | out: lpString1="61644669") returned="61644669" [0075.740] lstrlenW (lpString="61644669") returned 8 [0075.740] lstrcpynW (in: lpString1=0x46b000, lpString2="61644669", iMaxLength=1024 | out: lpString1="61644669") returned="61644669" [0075.740] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.740] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.740] lstrlenW (lpString="") returned 0 [0075.740] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.740] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.740] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.740] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.741] lstrcpynW (in: lpString1=0x432ea4, lpString2="61", iMaxLength=1024 | out: lpString1="61") returned="61" [0075.741] lstrlenW (lpString="61") returned 2 [0075.741] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="a") returned 1 [0075.741] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.741] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.741] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.741] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.741] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.741] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.741] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.741] lstrcpynW (in: lpString1=0x432ea0, lpString2="a", iMaxLength=1024 | out: lpString1="a") returned="a" [0075.741] lstrlenW (lpString="a") returned 1 [0075.741] lstrcpynW (in: lpString1=0x40b5f0, lpString2="a", iMaxLength=1024 | out: lpString1="a") returned="a" [0075.741] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.741] lstrcmpiW (lpString1="a", lpString2="^") returned 1 [0075.741] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.742] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.742] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.742] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.742] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.742] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.742] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.742] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.742] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::Re", iMaxLength=1024 | out: lpString1="KERNEL32::Re") returned="KERNEL32::Re" [0075.742] lstrlenW (lpString="KERNEL32::Re") returned 12 [0075.742] lstrcpynW (in: lpString1=0x432eb8, lpString2="a", iMaxLength=1024 | out: lpString1="a") returned="a" [0075.743] lstrlenW (lpString="a") returned 1 [0075.743] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::Rea", iMaxLength=1024 | out: lpString1="KERNEL32::Rea") returned="KERNEL32::Rea" [0075.743] lstrlenW (lpString="KERNEL32::Rea") returned 13 [0075.743] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::Rea", iMaxLength=1024 | out: lpString1="KERNEL32::Rea") returned="KERNEL32::Rea" [0075.743] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.743] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.743] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.743] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.743] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.743] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.743] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.743] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.744] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.744] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.744] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.744] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.744] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.744] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.744] lstrlenW (lpString="C:\\Windows") returned 10 [0075.744] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.744] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.744] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.744] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.745] lstrlenW (lpString="524386") returned 6 [0075.745] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.745] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.745] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.745] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.745] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.745] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.745] lstrlenW (lpString="0") returned 1 [0075.745] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.745] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.745] lstrlenW (lpString="2") returned 1 [0075.745] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.745] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.745] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.745] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.745] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.745] lstrlenW (lpString="2") returned 1 [0075.745] lstrcpynW (in: lpString1=0x432ea0, lpString2="61644669", iMaxLength=1024 | out: lpString1="61644669") returned="61644669" [0075.745] lstrlenW (lpString="61644669") returned 8 [0075.745] lstrcpynW (in: lpString1=0x40a5f0, lpString2="61644669", iMaxLength=1024 | out: lpString1="61644669") returned="61644669" [0075.745] lstrlenW (lpString="61644669") returned 8 [0075.745] lstrcpynW (in: lpString1=0x46b000, lpString2="644669", iMaxLength=1024 | out: lpString1="644669") returned="644669" [0075.745] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.745] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.746] lstrlenW (lpString="") returned 0 [0075.746] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.746] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.746] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.746] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.746] lstrcpynW (in: lpString1=0x432ea4, lpString2="64", iMaxLength=1024 | out: lpString1="64") returned="64" [0075.746] lstrlenW (lpString="64") returned 2 [0075.746] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="d") returned 1 [0075.746] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.746] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.746] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.746] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.746] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.746] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.746] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.746] lstrcpynW (in: lpString1=0x432ea0, lpString2="d", iMaxLength=1024 | out: lpString1="d") returned="d" [0075.746] lstrlenW (lpString="d") returned 1 [0075.747] lstrcpynW (in: lpString1=0x40b5f0, lpString2="d", iMaxLength=1024 | out: lpString1="d") returned="d" [0075.747] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.747] lstrcmpiW (lpString1="d", lpString2="^") returned 1 [0075.747] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.747] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.747] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.747] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.747] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.747] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.747] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.747] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.747] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::Rea", iMaxLength=1024 | out: lpString1="KERNEL32::Rea") returned="KERNEL32::Rea" [0075.748] lstrlenW (lpString="KERNEL32::Rea") returned 13 [0075.748] lstrcpynW (in: lpString1=0x432eba, lpString2="d", iMaxLength=1024 | out: lpString1="d") returned="d" [0075.748] lstrlenW (lpString="d") returned 1 [0075.748] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::Read", iMaxLength=1024 | out: lpString1="KERNEL32::Read") returned="KERNEL32::Read" [0075.748] lstrlenW (lpString="KERNEL32::Read") returned 14 [0075.748] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::Read", iMaxLength=1024 | out: lpString1="KERNEL32::Read") returned="KERNEL32::Read" [0075.748] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.748] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.748] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.748] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.748] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.748] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.748] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.748] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.749] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.749] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.749] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.749] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.749] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.749] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.749] lstrlenW (lpString="C:\\Windows") returned 10 [0075.749] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.749] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.750] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.750] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.750] lstrlenW (lpString="524386") returned 6 [0075.750] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.750] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.750] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.750] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.750] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.750] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.750] lstrlenW (lpString="2") returned 1 [0075.750] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.750] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.750] lstrlenW (lpString="4") returned 1 [0075.750] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.750] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.750] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.750] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.750] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.750] lstrlenW (lpString="4") returned 1 [0075.751] lstrcpynW (in: lpString1=0x432ea0, lpString2="61644669", iMaxLength=1024 | out: lpString1="61644669") returned="61644669" [0075.751] lstrlenW (lpString="61644669") returned 8 [0075.751] lstrcpynW (in: lpString1=0x40a5f0, lpString2="61644669", iMaxLength=1024 | out: lpString1="61644669") returned="61644669" [0075.751] lstrlenW (lpString="61644669") returned 8 [0075.751] lstrcpynW (in: lpString1=0x46b000, lpString2="4669", iMaxLength=1024 | out: lpString1="4669") returned="4669" [0075.751] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.751] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.751] lstrlenW (lpString="") returned 0 [0075.751] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.751] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.751] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.751] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.751] lstrcpynW (in: lpString1=0x432ea4, lpString2="46", iMaxLength=1024 | out: lpString1="46") returned="46" [0075.751] lstrlenW (lpString="46") returned 2 [0075.751] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="F") returned 1 [0075.751] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.751] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.751] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.751] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.752] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.752] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.752] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.752] lstrcpynW (in: lpString1=0x432ea0, lpString2="F", iMaxLength=1024 | out: lpString1="F") returned="F" [0075.752] lstrlenW (lpString="F") returned 1 [0075.752] lstrcpynW (in: lpString1=0x40b5f0, lpString2="F", iMaxLength=1024 | out: lpString1="F") returned="F" [0075.752] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.752] lstrcmpiW (lpString1="F", lpString2="^") returned 1 [0075.752] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.752] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.752] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.752] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.752] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.752] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.753] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.753] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.753] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.753] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.753] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.753] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.753] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.753] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.753] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.754] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.754] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.754] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.754] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.754] lstrlenW (lpString="C:\\Windows") returned 10 [0075.754] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.754] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.754] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.754] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.754] lstrlenW (lpString="524386") returned 6 [0075.754] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.754] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.755] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.755] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.755] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.755] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.755] lstrlenW (lpString="4") returned 1 [0075.755] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.755] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.755] lstrlenW (lpString="6") returned 1 [0075.755] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.755] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.755] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.755] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.755] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.755] lstrlenW (lpString="6") returned 1 [0075.755] lstrcpynW (in: lpString1=0x432ea0, lpString2="61644669", iMaxLength=1024 | out: lpString1="61644669") returned="61644669" [0075.755] lstrlenW (lpString="61644669") returned 8 [0075.755] lstrcpynW (in: lpString1=0x40a5f0, lpString2="61644669", iMaxLength=1024 | out: lpString1="61644669") returned="61644669" [0075.755] lstrlenW (lpString="61644669") returned 8 [0075.755] lstrcpynW (in: lpString1=0x46b000, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0075.755] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.755] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.755] lstrlenW (lpString="") returned 0 [0075.755] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.755] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.756] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.756] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.756] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0075.756] lstrlenW (lpString="69") returned 2 [0075.756] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0075.756] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.756] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.756] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.756] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.756] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.756] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.756] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.756] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.756] lstrlenW (lpString="i") returned 1 [0075.756] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.756] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.756] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0075.756] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.757] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.757] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.757] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.757] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.757] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.757] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.757] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.757] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadF", iMaxLength=1024 | out: lpString1="KERNEL32::ReadF") returned="KERNEL32::ReadF" [0075.758] lstrlenW (lpString="KERNEL32::ReadF") returned 15 [0075.758] lstrcpynW (in: lpString1=0x432ebe, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.758] lstrlenW (lpString="i") returned 1 [0075.758] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFi", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFi") returned="KERNEL32::ReadFi" [0075.758] lstrlenW (lpString="KERNEL32::ReadFi") returned 16 [0075.758] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFi", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFi") returned="KERNEL32::ReadFi" [0075.758] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.758] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.758] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.758] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.758] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.758] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.759] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.759] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.759] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.759] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.759] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.759] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.759] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.759] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.760] lstrlenW (lpString="C:\\Windows") returned 10 [0075.760] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.760] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.760] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.760] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.760] lstrlenW (lpString="524386") returned 6 [0075.760] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.760] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.760] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.760] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.760] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.760] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.760] lstrlenW (lpString="6") returned 1 [0075.760] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.760] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.760] lstrlenW (lpString="8") returned 1 [0075.760] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.761] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.761] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.761] lstrlenW (lpString="Execute: ") returned 9 [0075.761] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.761] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.761] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.761] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x3f [0075.761] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x3f [0075.762] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x3f, lParam=0x0) returned 0x1 [0075.762] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.762] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.762] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.762] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.762] lstrcpynW (in: lpString1=0x432ea0, lpString2="404", iMaxLength=1024 | out: lpString1="404") returned="404" [0075.762] lstrlenW (lpString="404") returned 3 [0075.762] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="412") returned 3 [0075.762] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.762] lstrlenW (lpString="") returned 0 [0075.763] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.763] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.763] lstrcpynW (in: lpString1=0x432ea0, lpString2="412", iMaxLength=1024 | out: lpString1="412") returned="412" [0075.763] lstrlenW (lpString="412") returned 3 [0075.763] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.763] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrlenW (lpString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returned 1023 [0075.763] lstrcpynW (in: lpString1=0x46d000, lpString2="99ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned="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" [0075.763] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.763] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.763] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.763] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.763] lstrcpynW (in: lpString1=0x432ea4, lpString2="99ED5DF5", iMaxLength=1024 | out: lpString1="99ED5DF5") returned="99ED5DF5" [0075.763] lstrlenW (lpString="99ED5DF5") returned 8 [0075.763] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1818568809") returned 10 [0075.763] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.763] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.764] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.764] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.764] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.764] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.764] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.764] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.764] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.764] lstrcpynW (in: lpString1=0x432ea0, lpString2="1818568809", iMaxLength=1024 | out: lpString1="1818568809") returned="1818568809" [0075.764] lstrlenW (lpString="1818568809") returned 10 [0075.764] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="6C652869") returned 8 [0075.764] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.764] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.765] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.765] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.765] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.765] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.765] lstrlenW (lpString="0") returned 1 [0075.765] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.765] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.765] lstrlenW (lpString="0") returned 1 [0075.765] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.765] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.765] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.765] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.765] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.765] lstrlenW (lpString="0") returned 1 [0075.765] lstrcpynW (in: lpString1=0x432ea0, lpString2="6C652869", iMaxLength=1024 | out: lpString1="6C652869") returned="6C652869" [0075.765] lstrlenW (lpString="6C652869") returned 8 [0075.765] lstrcpynW (in: lpString1=0x40a5f0, lpString2="6C652869", iMaxLength=1024 | out: lpString1="6C652869") returned="6C652869" [0075.766] lstrlenW (lpString="6C652869") returned 8 [0075.766] lstrcpynW (in: lpString1=0x46b000, lpString2="6C652869", iMaxLength=1024 | out: lpString1="6C652869") returned="6C652869" [0075.766] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.766] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.766] lstrlenW (lpString="") returned 0 [0075.766] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.766] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.766] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.766] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.766] lstrcpynW (in: lpString1=0x432ea4, lpString2="6C", iMaxLength=1024 | out: lpString1="6C") returned="6C" [0075.766] lstrlenW (lpString="6C") returned 2 [0075.766] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="l") returned 1 [0075.766] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.766] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.766] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.766] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.766] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.766] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.766] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.767] lstrcpynW (in: lpString1=0x432ea0, lpString2="l", iMaxLength=1024 | out: lpString1="l") returned="l" [0075.767] lstrlenW (lpString="l") returned 1 [0075.767] lstrcpynW (in: lpString1=0x40b5f0, lpString2="l", iMaxLength=1024 | out: lpString1="l") returned="l" [0075.767] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.767] lstrcmpiW (lpString1="l", lpString2="^") returned 1 [0075.767] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.767] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.767] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.767] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.767] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.767] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.767] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.767] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.767] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFi", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFi") returned="KERNEL32::ReadFi" [0075.768] lstrlenW (lpString="KERNEL32::ReadFi") returned 16 [0075.768] lstrcpynW (in: lpString1=0x432ec0, lpString2="l", iMaxLength=1024 | out: lpString1="l") returned="l" [0075.768] lstrlenW (lpString="l") returned 1 [0075.768] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFil", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFil") returned="KERNEL32::ReadFil" [0075.768] lstrlenW (lpString="KERNEL32::ReadFil") returned 17 [0075.768] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFil", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFil") returned="KERNEL32::ReadFil" [0075.768] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.768] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.768] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.768] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.768] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.768] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.768] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.768] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.769] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.769] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.769] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.769] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.769] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.769] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.769] lstrlenW (lpString="C:\\Windows") returned 10 [0075.769] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.769] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.769] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.770] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.770] lstrlenW (lpString="524386") returned 6 [0075.770] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.770] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.770] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.770] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.770] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.770] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.770] lstrlenW (lpString="0") returned 1 [0075.770] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.770] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.770] lstrlenW (lpString="2") returned 1 [0075.770] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.770] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.770] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.770] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.770] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.770] lstrlenW (lpString="2") returned 1 [0075.770] lstrcpynW (in: lpString1=0x432ea0, lpString2="6C652869", iMaxLength=1024 | out: lpString1="6C652869") returned="6C652869" [0075.770] lstrlenW (lpString="6C652869") returned 8 [0075.770] lstrcpynW (in: lpString1=0x40a5f0, lpString2="6C652869", iMaxLength=1024 | out: lpString1="6C652869") returned="6C652869" [0075.770] lstrlenW (lpString="6C652869") returned 8 [0075.770] lstrcpynW (in: lpString1=0x46b000, lpString2="652869", iMaxLength=1024 | out: lpString1="652869") returned="652869" [0075.771] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.771] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.771] lstrlenW (lpString="") returned 0 [0075.771] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.771] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.771] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.771] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.771] lstrcpynW (in: lpString1=0x432ea4, lpString2="65", iMaxLength=1024 | out: lpString1="65") returned="65" [0075.771] lstrlenW (lpString="65") returned 2 [0075.771] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="e") returned 1 [0075.771] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.771] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.771] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.771] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.771] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.771] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.771] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.771] lstrcpynW (in: lpString1=0x432ea0, lpString2="e", iMaxLength=1024 | out: lpString1="e") returned="e" [0075.771] lstrlenW (lpString="e") returned 1 [0075.772] lstrcpynW (in: lpString1=0x40b5f0, lpString2="e", iMaxLength=1024 | out: lpString1="e") returned="e" [0075.772] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.772] lstrcmpiW (lpString1="e", lpString2="^") returned 1 [0075.772] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.772] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.772] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.772] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.772] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.772] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.772] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.772] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.772] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFil", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFil") returned="KERNEL32::ReadFil" [0075.772] lstrlenW (lpString="KERNEL32::ReadFil") returned 17 [0075.773] lstrcpynW (in: lpString1=0x432ec2, lpString2="e", iMaxLength=1024 | out: lpString1="e") returned="e" [0075.773] lstrlenW (lpString="e") returned 1 [0075.773] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile") returned="KERNEL32::ReadFile" [0075.773] lstrlenW (lpString="KERNEL32::ReadFile") returned 18 [0075.773] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile") returned="KERNEL32::ReadFile" [0075.773] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.773] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.773] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.773] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.773] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.773] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.773] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.774] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.774] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.774] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.774] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.774] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.774] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.774] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.774] lstrlenW (lpString="C:\\Windows") returned 10 [0075.774] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.774] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.775] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.775] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.775] lstrlenW (lpString="524386") returned 6 [0075.775] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.775] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.775] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.775] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.775] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.775] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.775] lstrlenW (lpString="2") returned 1 [0075.775] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.775] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.775] lstrlenW (lpString="4") returned 1 [0075.775] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.775] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.775] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.775] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.775] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.775] lstrlenW (lpString="4") returned 1 [0075.775] lstrcpynW (in: lpString1=0x432ea0, lpString2="6C652869", iMaxLength=1024 | out: lpString1="6C652869") returned="6C652869" [0075.776] lstrlenW (lpString="6C652869") returned 8 [0075.776] lstrcpynW (in: lpString1=0x40a5f0, lpString2="6C652869", iMaxLength=1024 | out: lpString1="6C652869") returned="6C652869" [0075.776] lstrlenW (lpString="6C652869") returned 8 [0075.776] lstrcpynW (in: lpString1=0x46b000, lpString2="2869", iMaxLength=1024 | out: lpString1="2869") returned="2869" [0075.776] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.776] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.776] lstrlenW (lpString="") returned 0 [0075.776] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.776] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.776] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.776] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.776] lstrcpynW (in: lpString1=0x432ea4, lpString2="28", iMaxLength=1024 | out: lpString1="28") returned="28" [0075.776] lstrlenW (lpString="28") returned 2 [0075.776] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="(") returned 1 [0075.776] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.776] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.776] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.776] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.776] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.777] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.777] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.777] lstrcpynW (in: lpString1=0x432ea0, lpString2="(", iMaxLength=1024 | out: lpString1="(") returned="(" [0075.777] lstrlenW (lpString="(") returned 1 [0075.777] lstrcpynW (in: lpString1=0x40b5f0, lpString2="(", iMaxLength=1024 | out: lpString1="(") returned="(" [0075.777] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.777] lstrcmpiW (lpString1="(", lpString2="^") returned -1 [0075.777] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.777] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.777] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.777] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.777] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.777] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.778] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.778] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.778] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile") returned="KERNEL32::ReadFile" [0075.778] lstrlenW (lpString="KERNEL32::ReadFile") returned 18 [0075.778] lstrcpynW (in: lpString1=0x432ec4, lpString2="(", iMaxLength=1024 | out: lpString1="(") returned="(" [0075.778] lstrlenW (lpString="(") returned 1 [0075.778] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(") returned="KERNEL32::ReadFile(" [0075.778] lstrlenW (lpString="KERNEL32::ReadFile(") returned 19 [0075.778] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(") returned="KERNEL32::ReadFile(" [0075.778] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.778] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.778] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.778] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.778] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.778] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.778] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.779] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.779] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.779] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.779] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.779] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.779] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.779] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.779] lstrlenW (lpString="C:\\Windows") returned 10 [0075.779] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.779] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.780] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.780] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.780] lstrlenW (lpString="524386") returned 6 [0075.780] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.780] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.780] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.780] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.780] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.780] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.780] lstrlenW (lpString="4") returned 1 [0075.780] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.780] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.780] lstrlenW (lpString="6") returned 1 [0075.780] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.780] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.780] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.780] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.780] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.780] lstrlenW (lpString="6") returned 1 [0075.780] lstrcpynW (in: lpString1=0x432ea0, lpString2="6C652869", iMaxLength=1024 | out: lpString1="6C652869") returned="6C652869" [0075.781] lstrlenW (lpString="6C652869") returned 8 [0075.781] lstrcpynW (in: lpString1=0x40a5f0, lpString2="6C652869", iMaxLength=1024 | out: lpString1="6C652869") returned="6C652869" [0075.781] lstrlenW (lpString="6C652869") returned 8 [0075.781] lstrcpynW (in: lpString1=0x46b000, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0075.781] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.781] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.781] lstrlenW (lpString="") returned 0 [0075.781] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.781] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.781] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.781] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.781] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0075.781] lstrlenW (lpString="69") returned 2 [0075.781] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0075.781] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.781] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.781] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33aef8 [0075.781] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.782] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.782] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.782] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.782] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.782] lstrlenW (lpString="i") returned 1 [0075.782] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.782] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.782] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0075.782] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.782] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.782] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.782] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.782] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.782] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.783] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.783] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.783] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(") returned="KERNEL32::ReadFile(" [0075.783] lstrlenW (lpString="KERNEL32::ReadFile(") returned 19 [0075.783] lstrcpynW (in: lpString1=0x432ec6, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.783] lstrlenW (lpString="i") returned 1 [0075.783] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(i", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(i") returned="KERNEL32::ReadFile(i" [0075.783] lstrlenW (lpString="KERNEL32::ReadFile(i") returned 20 [0075.783] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(i", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(i") returned="KERNEL32::ReadFile(i" [0075.783] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.783] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.783] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.783] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.783] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.783] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.784] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.784] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.784] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.784] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33aef8 [0075.784] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.784] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.784] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33aef8 [0075.784] FindClose (in: hFindFile=0x33aef8 | out: hFindFile=0x33aef8) returned 1 [0075.784] lstrlenW (lpString="C:\\Windows") returned 10 [0075.784] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.785] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.785] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.785] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.785] lstrlenW (lpString="524386") returned 6 [0075.785] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.785] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.785] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.785] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.785] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.785] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.785] lstrlenW (lpString="6") returned 1 [0075.785] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.785] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.785] lstrlenW (lpString="8") returned 1 [0075.785] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.785] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.785] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.785] lstrlenW (lpString="Execute: ") returned 9 [0075.786] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.786] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.786] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.786] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x40 [0075.786] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x40 [0075.787] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x40, lParam=0x0) returned 0x1 [0075.787] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.787] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.787] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.787] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.787] lstrcpynW (in: lpString1=0x432ea0, lpString2="412", iMaxLength=1024 | out: lpString1="412") returned="412" [0075.787] lstrlenW (lpString="412") returned 3 [0075.787] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="420") returned 3 [0075.787] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.787] lstrlenW (lpString="") returned 0 [0075.787] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.787] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.787] lstrcpynW (in: lpString1=0x432ea0, lpString2="420", iMaxLength=1024 | out: lpString1="420") returned="420" [0075.788] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString1="87BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned="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" [0075.788] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.788] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.788] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.788] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.788] lstrcpynW (in: lpString1=0x432ea4, lpString2="87BD59BC", iMaxLength=1024 | out: lpString1="87BD59BC") returned="87BD59BC" [0075.788] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1916087328") returned 10 [0075.788] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.788] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.788] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.788] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.794] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.794] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.795] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.795] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.795] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.795] lstrcpynW (in: lpString1=0x432ea0, lpString2="1916087328", iMaxLength=1024 | out: lpString1="1916087328") returned="1916087328" [0075.795] lstrlenW (lpString="1916087328") returned 10 [0075.795] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="72352C20") returned 8 [0075.795] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.795] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.795] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.795] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.795] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.795] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.796] lstrlenW (lpString="0") returned 1 [0075.796] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.796] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.796] lstrlenW (lpString="0") returned 1 [0075.796] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.796] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.796] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.796] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.796] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.796] lstrlenW (lpString="0") returned 1 [0075.796] lstrcpynW (in: lpString1=0x432ea0, lpString2="72352C20", iMaxLength=1024 | out: lpString1="72352C20") returned="72352C20" [0075.796] lstrlenW (lpString="72352C20") returned 8 [0075.796] lstrcpynW (in: lpString1=0x40a5f0, lpString2="72352C20", iMaxLength=1024 | out: lpString1="72352C20") returned="72352C20" [0075.796] lstrlenW (lpString="72352C20") returned 8 [0075.796] lstrcpynW (in: lpString1=0x46b000, lpString2="72352C20", iMaxLength=1024 | out: lpString1="72352C20") returned="72352C20" [0075.796] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.796] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.796] lstrlenW (lpString="") returned 0 [0075.796] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.796] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.796] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.796] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.796] lstrcpynW (in: lpString1=0x432ea4, lpString2="72", iMaxLength=1024 | out: lpString1="72") returned="72" [0075.797] lstrlenW (lpString="72") returned 2 [0075.797] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="r") returned 1 [0075.797] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.797] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.797] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.797] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.797] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.797] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.797] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.797] lstrcpynW (in: lpString1=0x432ea0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0075.797] lstrlenW (lpString="r") returned 1 [0075.797] lstrcpynW (in: lpString1=0x40b5f0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0075.797] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.797] lstrcmpiW (lpString1="r", lpString2="^") returned 1 [0075.797] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.798] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.798] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.798] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.798] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.798] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.798] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.798] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.798] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(i", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(i") returned="KERNEL32::ReadFile(i" [0075.798] lstrlenW (lpString="KERNEL32::ReadFile(i") returned 20 [0075.798] lstrcpynW (in: lpString1=0x432ec8, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0075.798] lstrlenW (lpString="r") returned 1 [0075.798] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir") returned="KERNEL32::ReadFile(ir" [0075.798] lstrlenW (lpString="KERNEL32::ReadFile(ir") returned 21 [0075.798] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir") returned="KERNEL32::ReadFile(ir" [0075.799] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.799] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.799] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.799] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.799] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.799] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.799] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.799] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.799] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.799] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.800] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.800] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.800] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.800] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.800] lstrlenW (lpString="C:\\Windows") returned 10 [0075.800] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.800] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.800] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.800] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.800] lstrlenW (lpString="524386") returned 6 [0075.800] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.800] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.800] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.801] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.801] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.801] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.801] lstrlenW (lpString="0") returned 1 [0075.801] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.801] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.801] lstrlenW (lpString="2") returned 1 [0075.801] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.801] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.801] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.801] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.801] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.801] lstrlenW (lpString="2") returned 1 [0075.801] lstrcpynW (in: lpString1=0x432ea0, lpString2="72352C20", iMaxLength=1024 | out: lpString1="72352C20") returned="72352C20" [0075.801] lstrlenW (lpString="72352C20") returned 8 [0075.801] lstrcpynW (in: lpString1=0x40a5f0, lpString2="72352C20", iMaxLength=1024 | out: lpString1="72352C20") returned="72352C20" [0075.801] lstrlenW (lpString="72352C20") returned 8 [0075.801] lstrcpynW (in: lpString1=0x46b000, lpString2="352C20", iMaxLength=1024 | out: lpString1="352C20") returned="352C20" [0075.801] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.801] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.801] lstrlenW (lpString="") returned 0 [0075.801] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.801] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.801] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.802] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.802] lstrcpynW (in: lpString1=0x432ea4, lpString2="35", iMaxLength=1024 | out: lpString1="35") returned="35" [0075.802] lstrlenW (lpString="35") returned 2 [0075.802] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="5") returned 1 [0075.802] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.802] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.802] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.802] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.802] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.802] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.802] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.802] lstrcpynW (in: lpString1=0x432ea0, lpString2="5", iMaxLength=1024 | out: lpString1="5") returned="5" [0075.802] lstrlenW (lpString="5") returned 1 [0075.802] lstrcpynW (in: lpString1=0x40b5f0, lpString2="5", iMaxLength=1024 | out: lpString1="5") returned="5" [0075.802] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.802] lstrcmpiW (lpString1="5", lpString2="^") returned 1 [0075.802] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.803] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.803] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.803] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.803] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.803] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.803] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.803] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.803] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir") returned="KERNEL32::ReadFile(ir" [0075.803] lstrlenW (lpString="KERNEL32::ReadFile(ir") returned 21 [0075.803] lstrcpynW (in: lpString1=0x432eca, lpString2="5", iMaxLength=1024 | out: lpString1="5") returned="5" [0075.803] lstrlenW (lpString="5") returned 1 [0075.803] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5") returned="KERNEL32::ReadFile(ir5" [0075.803] lstrlenW (lpString="KERNEL32::ReadFile(ir5") returned 22 [0075.803] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5") returned="KERNEL32::ReadFile(ir5" [0075.803] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.804] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.804] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.804] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.804] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.804] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.804] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.804] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.804] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.804] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.805] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.805] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.805] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.805] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.805] lstrlenW (lpString="C:\\Windows") returned 10 [0075.805] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.805] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.805] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.805] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.805] lstrlenW (lpString="524386") returned 6 [0075.805] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.805] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.805] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.805] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.806] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.806] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.806] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.806] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.806] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.806] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.806] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.806] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=",") returned 1 [0075.806] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.806] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.806] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.806] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.806] lstrcmpiW (lpString1=",", lpString2="^") returned -1 [0075.806] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.806] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.807] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.807] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.807] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.807] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.807] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.807] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.807] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5") returned="KERNEL32::ReadFile(ir5" [0075.807] lstrlenW (lpString="KERNEL32::ReadFile(ir5") returned 22 [0075.807] lstrcpynW (in: lpString1=0x432ecc, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0075.807] lstrlenW (lpString=",") returned 1 [0075.807] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5,", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5,") returned="KERNEL32::ReadFile(ir5," [0075.807] lstrlenW (lpString="KERNEL32::ReadFile(ir5,") returned 23 [0075.807] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5,", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5,") returned="KERNEL32::ReadFile(ir5," [0075.807] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.808] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.808] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.808] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.808] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.808] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.808] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.808] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.808] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.808] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.808] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.809] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.809] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.809] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.809] lstrlenW (lpString="C:\\Windows") returned 10 [0075.809] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.809] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.809] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.809] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.809] lstrlenW (lpString="524386") returned 6 [0075.809] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.809] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.809] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.809] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.809] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.809] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.809] lstrlenW (lpString="4") returned 1 [0075.810] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.810] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.810] lstrlenW (lpString="6") returned 1 [0075.810] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.810] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.810] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.810] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.810] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.810] lstrlenW (lpString="6") returned 1 [0075.810] lstrcpynW (in: lpString1=0x432ea0, lpString2="72352C20", iMaxLength=1024 | out: lpString1="72352C20") returned="72352C20" [0075.810] lstrlenW (lpString="72352C20") returned 8 [0075.810] lstrcpynW (in: lpString1=0x40a5f0, lpString2="72352C20", iMaxLength=1024 | out: lpString1="72352C20") returned="72352C20" [0075.810] lstrlenW (lpString="72352C20") returned 8 [0075.810] lstrcpynW (in: lpString1=0x46b000, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0075.810] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.810] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.810] lstrlenW (lpString="") returned 0 [0075.810] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.810] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.810] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.810] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.810] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0075.810] lstrlenW (lpString="20") returned 2 [0075.810] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0075.810] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.811] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.811] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.811] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.811] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.811] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.811] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.811] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.811] lstrlenW (lpString=" ") returned 1 [0075.811] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.811] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.811] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0075.811] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.811] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.811] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.811] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.812] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.812] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.812] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.812] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.812] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5,", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5,") returned="KERNEL32::ReadFile(ir5," [0075.812] lstrlenW (lpString="KERNEL32::ReadFile(ir5,") returned 23 [0075.812] lstrcpynW (in: lpString1=0x432ece, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.812] lstrlenW (lpString=" ") returned 1 [0075.812] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, ", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, ") returned="KERNEL32::ReadFile(ir5, " [0075.812] lstrlenW (lpString="KERNEL32::ReadFile(ir5, ") returned 24 [0075.812] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, ", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, ") returned="KERNEL32::ReadFile(ir5, " [0075.812] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.812] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.813] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.813] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.813] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.813] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.813] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.813] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.813] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.813] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.813] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.813] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.814] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.814] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.814] lstrlenW (lpString="C:\\Windows") returned 10 [0075.814] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.814] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.814] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.814] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.814] lstrlenW (lpString="524386") returned 6 [0075.814] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.814] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.814] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.814] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.814] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.814] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.814] lstrlenW (lpString="6") returned 1 [0075.814] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.815] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.815] lstrlenW (lpString="8") returned 1 [0075.815] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.815] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.815] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.815] lstrlenW (lpString="Execute: ") returned 9 [0075.815] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.815] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.815] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.815] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x41 [0075.816] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x41 [0075.816] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x41, lParam=0x0) returned 0x1 [0075.816] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.816] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.816] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.816] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.817] lstrcpynW (in: lpString1=0x432ea0, lpString2="420", iMaxLength=1024 | out: lpString1="420") returned="420" [0075.817] lstrlenW (lpString="420") returned 3 [0075.817] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="428") returned 3 [0075.817] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.817] lstrlenW (lpString="") returned 0 [0075.817] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.817] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.817] lstrcpynW (in: lpString1=0x432ea0, lpString2="428", iMaxLength=1024 | out: lpString1="428") returned="428" [0075.817] lstrlenW (lpString="428") returned 3 [0075.817] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.817] lstrcpynW (in: lpString1=0x40a5f0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrlenW (lpString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returned 1023 [0075.817] lstrcpynW (in: lpString1=0x46d000, lpString2="9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned="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" [0075.817] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.817] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.817] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.817] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.817] lstrcpynW (in: lpString1=0x432ea4, lpString2="9CA807AD", iMaxLength=1024 | out: lpString1="9CA807AD") returned="9CA807AD" [0075.818] lstrlenW (lpString="9CA807AD") returned 8 [0075.818] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1763734065") returned 10 [0075.818] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.818] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.818] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.818] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.818] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.818] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.818] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.818] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.818] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.818] lstrcpynW (in: lpString1=0x432ea0, lpString2="1763734065", iMaxLength=1024 | out: lpString1="1763734065") returned="1763734065" [0075.818] lstrlenW (lpString="1763734065") returned 10 [0075.819] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="69207231") returned 8 [0075.819] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.819] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.819] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.819] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.819] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.819] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.819] lstrlenW (lpString="0") returned 1 [0075.819] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.819] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.819] lstrlenW (lpString="0") returned 1 [0075.819] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.819] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.819] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.819] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.819] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.820] lstrlenW (lpString="0") returned 1 [0075.820] lstrcpynW (in: lpString1=0x432ea0, lpString2="69207231", iMaxLength=1024 | out: lpString1="69207231") returned="69207231" [0075.820] lstrlenW (lpString="69207231") returned 8 [0075.820] lstrcpynW (in: lpString1=0x40a5f0, lpString2="69207231", iMaxLength=1024 | out: lpString1="69207231") returned="69207231" [0075.820] lstrlenW (lpString="69207231") returned 8 [0075.820] lstrcpynW (in: lpString1=0x46b000, lpString2="69207231", iMaxLength=1024 | out: lpString1="69207231") returned="69207231" [0075.820] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.820] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.820] lstrlenW (lpString="") returned 0 [0075.820] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.820] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.820] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.821] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.821] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0075.821] lstrlenW (lpString="69") returned 2 [0075.821] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0075.821] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.821] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.821] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.821] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.821] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.821] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.821] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.821] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.821] lstrlenW (lpString="i") returned 1 [0075.821] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.821] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.821] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0075.821] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.822] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.822] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.822] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.822] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.822] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.822] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.822] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.822] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, ", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, ") returned="KERNEL32::ReadFile(ir5, " [0075.822] lstrlenW (lpString="KERNEL32::ReadFile(ir5, ") returned 24 [0075.822] lstrcpynW (in: lpString1=0x432ed0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.822] lstrlenW (lpString="i") returned 1 [0075.822] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i") returned="KERNEL32::ReadFile(ir5, i" [0075.822] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i") returned 25 [0075.822] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i") returned="KERNEL32::ReadFile(ir5, i" [0075.822] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.823] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.823] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.823] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.823] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.823] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.823] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.823] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.823] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.823] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.824] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.824] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.824] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.824] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.824] lstrlenW (lpString="C:\\Windows") returned 10 [0075.824] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.824] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.824] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.824] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.824] lstrlenW (lpString="524386") returned 6 [0075.824] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.824] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.824] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.825] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.825] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.825] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.825] lstrlenW (lpString="0") returned 1 [0075.825] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.825] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.825] lstrlenW (lpString="2") returned 1 [0075.825] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.825] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.825] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.825] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.825] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.825] lstrlenW (lpString="2") returned 1 [0075.825] lstrcpynW (in: lpString1=0x432ea0, lpString2="69207231", iMaxLength=1024 | out: lpString1="69207231") returned="69207231" [0075.825] lstrlenW (lpString="69207231") returned 8 [0075.825] lstrcpynW (in: lpString1=0x40a5f0, lpString2="69207231", iMaxLength=1024 | out: lpString1="69207231") returned="69207231" [0075.825] lstrlenW (lpString="69207231") returned 8 [0075.825] lstrcpynW (in: lpString1=0x46b000, lpString2="207231", iMaxLength=1024 | out: lpString1="207231") returned="207231" [0075.825] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.825] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.825] lstrlenW (lpString="") returned 0 [0075.825] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.825] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.826] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.826] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.826] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0075.826] lstrlenW (lpString="20") returned 2 [0075.826] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0075.826] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.826] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.826] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.826] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.826] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.826] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.826] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.826] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.826] lstrlenW (lpString=" ") returned 1 [0075.826] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.826] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.826] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0075.827] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.827] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.827] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.827] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.827] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.827] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.828] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.828] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.828] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i") returned="KERNEL32::ReadFile(ir5, i" [0075.828] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i") returned 25 [0075.828] lstrcpynW (in: lpString1=0x432ed2, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.828] lstrlenW (lpString=" ") returned 1 [0075.828] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i ", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i ") returned="KERNEL32::ReadFile(ir5, i " [0075.829] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i ") returned 26 [0075.829] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i ", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i ") returned="KERNEL32::ReadFile(ir5, i " [0075.829] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.829] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.829] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.829] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.829] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.829] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.829] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.829] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.829] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.829] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.830] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.830] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.830] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.830] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.830] lstrlenW (lpString="C:\\Windows") returned 10 [0075.830] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.830] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.830] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.830] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.830] lstrlenW (lpString="524386") returned 6 [0075.830] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.830] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.830] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.831] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.831] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.831] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.831] lstrlenW (lpString="2") returned 1 [0075.831] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.831] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.831] lstrlenW (lpString="4") returned 1 [0075.831] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.831] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.831] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.831] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.831] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.831] lstrlenW (lpString="4") returned 1 [0075.831] lstrcpynW (in: lpString1=0x432ea0, lpString2="69207231", iMaxLength=1024 | out: lpString1="69207231") returned="69207231" [0075.831] lstrlenW (lpString="69207231") returned 8 [0075.831] lstrcpynW (in: lpString1=0x40a5f0, lpString2="69207231", iMaxLength=1024 | out: lpString1="69207231") returned="69207231" [0075.831] lstrlenW (lpString="69207231") returned 8 [0075.831] lstrcpynW (in: lpString1=0x46b000, lpString2="7231", iMaxLength=1024 | out: lpString1="7231") returned="7231" [0075.831] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.831] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.831] lstrlenW (lpString="") returned 0 [0075.831] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.831] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.832] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.832] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.832] lstrcpynW (in: lpString1=0x432ea4, lpString2="72", iMaxLength=1024 | out: lpString1="72") returned="72" [0075.832] lstrlenW (lpString="72") returned 2 [0075.832] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="r") returned 1 [0075.832] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.832] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.832] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.832] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.832] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.832] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.832] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.832] lstrcpynW (in: lpString1=0x432ea0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0075.832] lstrlenW (lpString="r") returned 1 [0075.832] lstrcpynW (in: lpString1=0x40b5f0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0075.832] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.832] lstrcmpiW (lpString1="r", lpString2="^") returned 1 [0075.832] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.833] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.833] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.833] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.833] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.833] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.833] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.833] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.833] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i ", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i ") returned="KERNEL32::ReadFile(ir5, i " [0075.833] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i ") returned 26 [0075.833] lstrcpynW (in: lpString1=0x432ed4, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0075.833] lstrlenW (lpString="r") returned 1 [0075.833] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i r", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r") returned="KERNEL32::ReadFile(ir5, i r" [0075.833] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r") returned 27 [0075.833] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i r", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r") returned="KERNEL32::ReadFile(ir5, i r" [0075.833] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.834] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.834] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.834] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.834] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.834] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.834] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.834] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.834] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.834] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.835] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.835] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.835] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.835] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.835] lstrlenW (lpString="C:\\Windows") returned 10 [0075.835] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.835] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.835] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.835] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.835] lstrlenW (lpString="524386") returned 6 [0075.835] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.836] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.836] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.836] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.836] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.836] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.836] lstrlenW (lpString="4") returned 1 [0075.836] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.836] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.836] lstrlenW (lpString="6") returned 1 [0075.836] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.836] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.836] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.836] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.836] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.836] lstrlenW (lpString="6") returned 1 [0075.836] lstrcpynW (in: lpString1=0x432ea0, lpString2="69207231", iMaxLength=1024 | out: lpString1="69207231") returned="69207231" [0075.836] lstrlenW (lpString="69207231") returned 8 [0075.837] lstrcpynW (in: lpString1=0x40a5f0, lpString2="69207231", iMaxLength=1024 | out: lpString1="69207231") returned="69207231" [0075.837] lstrlenW (lpString="69207231") returned 8 [0075.838] lstrcpynW (in: lpString1=0x46b000, lpString2="31", iMaxLength=1024 | out: lpString1="31") returned="31" [0075.838] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.838] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.838] lstrlenW (lpString="") returned 0 [0075.838] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.838] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.838] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.838] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.838] lstrcpynW (in: lpString1=0x432ea4, lpString2="31", iMaxLength=1024 | out: lpString1="31") returned="31" [0075.838] lstrlenW (lpString="31") returned 2 [0075.838] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="1") returned 1 [0075.838] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.838] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.838] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.839] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.839] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.839] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.839] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.839] lstrcpynW (in: lpString1=0x432ea0, lpString2="1", iMaxLength=1024 | out: lpString1="1") returned="1" [0075.839] lstrlenW (lpString="1") returned 1 [0075.839] lstrcpynW (in: lpString1=0x40b5f0, lpString2="1", iMaxLength=1024 | out: lpString1="1") returned="1" [0075.839] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.839] lstrcmpiW (lpString1="1", lpString2="^") returned 1 [0075.839] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.839] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.839] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.839] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.839] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.839] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.840] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.840] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.840] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i r", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r") returned="KERNEL32::ReadFile(ir5, i r" [0075.840] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r") returned 27 [0075.840] lstrcpynW (in: lpString1=0x432ed6, lpString2="1", iMaxLength=1024 | out: lpString1="1") returned="1" [0075.840] lstrlenW (lpString="1") returned 1 [0075.840] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i r1", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1") returned="KERNEL32::ReadFile(ir5, i r1" [0075.840] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1") returned 28 [0075.840] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i r1", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1") returned="KERNEL32::ReadFile(ir5, i r1" [0075.840] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.840] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.840] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.840] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.840] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.840] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.841] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.841] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.841] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.841] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.841] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.841] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.841] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.841] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.841] lstrlenW (lpString="C:\\Windows") returned 10 [0075.841] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.842] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.842] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.842] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.842] lstrlenW (lpString="524386") returned 6 [0075.842] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.842] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.842] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.842] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.842] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.842] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.842] lstrlenW (lpString="6") returned 1 [0075.842] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.842] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.842] lstrlenW (lpString="8") returned 1 [0075.842] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.842] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.842] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.842] lstrlenW (lpString="Execute: ") returned 9 [0075.842] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.843] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.843] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.843] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x42 [0075.843] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x42 [0075.843] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x42, lParam=0x0) returned 0x1 [0075.844] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.844] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.844] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.844] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.844] lstrcpynW (in: lpString1=0x432ea0, lpString2="428", iMaxLength=1024 | out: lpString1="428") returned="428" [0075.844] lstrlenW (lpString="428") returned 3 [0075.844] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="436") returned 3 [0075.844] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.844] lstrlenW (lpString="") returned 0 [0075.844] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.844] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.844] lstrcpynW (in: lpString1=0x432ea0, lpString2="436", iMaxLength=1024 | out: lpString1="436") returned="436" [0075.844] lstrlenW (lpString="436") returned 3 [0075.844] lstrcpynW (in: lpString1=0x432ea0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.845] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.845] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned="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" [0075.845] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.845] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.845] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.845] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.845] lstrcpynW (in: lpString1=0x432ea4, lpString2="D9A81CBC", iMaxLength=1024 | out: lpString1="D9A81CBC") returned="D9A81CBC" [0075.845] lstrlenW (lpString="D9A81CBC") returned 8 [0075.845] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="740321568") returned 9 [0075.845] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.845] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.845] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.845] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.846] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.846] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.846] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.846] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.846] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.846] lstrcpynW (in: lpString1=0x432ea0, lpString2="740321568", iMaxLength=1024 | out: lpString1="740321568") returned="740321568" [0075.846] lstrlenW (lpString="740321568") returned 9 [0075.846] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="2C206920") returned 8 [0075.846] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.846] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.846] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.847] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.847] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.847] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.847] lstrlenW (lpString="0") returned 1 [0075.847] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.847] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.847] lstrlenW (lpString="0") returned 1 [0075.847] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.847] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.847] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.847] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.847] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.847] lstrlenW (lpString="0") returned 1 [0075.847] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0075.847] lstrlenW (lpString="2C206920") returned 8 [0075.847] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0075.847] lstrlenW (lpString="2C206920") returned 8 [0075.847] lstrcpynW (in: lpString1=0x46b000, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0075.847] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.847] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.848] lstrlenW (lpString="") returned 0 [0075.848] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.848] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.848] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.848] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.848] lstrcpynW (in: lpString1=0x432ea4, lpString2="2C", iMaxLength=1024 | out: lpString1="2C") returned="2C" [0075.848] lstrlenW (lpString="2C") returned 2 [0075.848] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=",") returned 1 [0075.848] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.848] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.848] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.848] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.848] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.848] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.848] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.848] lstrcpynW (in: lpString1=0x432ea0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0075.848] lstrlenW (lpString=",") returned 1 [0075.848] lstrcpynW (in: lpString1=0x40b5f0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0075.848] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.849] lstrcmpiW (lpString1=",", lpString2="^") returned -1 [0075.849] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.849] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.849] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.849] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.849] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.849] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.850] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.850] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.850] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i r1", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1") returned="KERNEL32::ReadFile(ir5, i r1" [0075.850] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1") returned 28 [0075.850] lstrcpynW (in: lpString1=0x432ed8, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0075.850] lstrlenW (lpString=",") returned 1 [0075.850] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i r1,", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1,") returned="KERNEL32::ReadFile(ir5, i r1," [0075.850] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1,") returned 29 [0075.850] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i r1,", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1,") returned="KERNEL32::ReadFile(ir5, i r1," [0075.850] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.850] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.850] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.850] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.850] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.850] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.851] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.851] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.851] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.851] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.854] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.854] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.854] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.855] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.856] lstrlenW (lpString="C:\\Windows") returned 10 [0075.856] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.856] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.856] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.856] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.856] lstrlenW (lpString="524386") returned 6 [0075.856] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.856] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.856] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.856] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.856] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.856] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.856] lstrlenW (lpString="0") returned 1 [0075.856] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.856] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.856] lstrlenW (lpString="2") returned 1 [0075.856] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.856] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.856] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.857] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.857] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.857] lstrlenW (lpString="2") returned 1 [0075.857] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0075.857] lstrlenW (lpString="2C206920") returned 8 [0075.857] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0075.857] lstrlenW (lpString="2C206920") returned 8 [0075.857] lstrcpynW (in: lpString1=0x46b000, lpString2="206920", iMaxLength=1024 | out: lpString1="206920") returned="206920" [0075.857] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.857] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.857] lstrlenW (lpString="") returned 0 [0075.857] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.857] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.857] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.857] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.857] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0075.857] lstrlenW (lpString="20") returned 2 [0075.857] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0075.857] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.857] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.857] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.858] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.858] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.858] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.858] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.858] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.858] lstrlenW (lpString=" ") returned 1 [0075.858] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.858] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.858] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0075.858] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.858] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.858] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.858] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.858] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.858] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.859] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.859] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.859] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.859] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.859] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.859] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.859] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.860] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.860] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.860] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.860] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.860] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.860] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.860] lstrlenW (lpString="C:\\Windows") returned 10 [0075.860] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.860] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.860] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.860] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.861] lstrlenW (lpString="524386") returned 6 [0075.861] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.861] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.861] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.861] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.861] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.861] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.861] lstrlenW (lpString="2") returned 1 [0075.861] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.861] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.861] lstrlenW (lpString="4") returned 1 [0075.861] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.861] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.861] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.861] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.861] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.861] lstrlenW (lpString="4") returned 1 [0075.861] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0075.861] lstrlenW (lpString="2C206920") returned 8 [0075.861] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0075.861] lstrlenW (lpString="2C206920") returned 8 [0075.861] lstrcpynW (in: lpString1=0x46b000, lpString2="6920", iMaxLength=1024 | out: lpString1="6920") returned="6920" [0075.862] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.862] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.862] lstrlenW (lpString="") returned 0 [0075.862] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.862] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.862] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.862] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.862] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0075.862] lstrlenW (lpString="69") returned 2 [0075.862] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0075.862] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.862] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.862] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.862] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.862] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.862] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.862] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.862] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.862] lstrlenW (lpString="i") returned 1 [0075.863] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.863] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.863] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0075.863] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.863] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.863] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.863] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.863] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.863] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.863] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.863] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.863] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i r1, ", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, ") returned="KERNEL32::ReadFile(ir5, i r1, " [0075.863] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, ") returned 30 [0075.863] lstrcpynW (in: lpString1=0x432edc, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.864] lstrlenW (lpString="i") returned 1 [0075.864] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i r1, i", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i") returned="KERNEL32::ReadFile(ir5, i r1, i" [0075.864] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i") returned 31 [0075.864] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i r1, i", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i") returned="KERNEL32::ReadFile(ir5, i r1, i" [0075.864] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.864] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.864] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.864] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.864] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.864] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.864] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.864] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.865] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.865] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.865] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.865] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.865] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.865] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.865] lstrlenW (lpString="C:\\Windows") returned 10 [0075.865] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.865] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.865] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.865] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.866] lstrlenW (lpString="524386") returned 6 [0075.866] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.866] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.866] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.866] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.866] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.866] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.866] lstrlenW (lpString="4") returned 1 [0075.866] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.866] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.866] lstrlenW (lpString="6") returned 1 [0075.866] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.866] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.866] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.866] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.866] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.866] lstrlenW (lpString="6") returned 1 [0075.866] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0075.866] lstrlenW (lpString="2C206920") returned 8 [0075.866] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0075.866] lstrlenW (lpString="2C206920") returned 8 [0075.866] lstrcpynW (in: lpString1=0x46b000, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0075.866] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.867] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.867] lstrlenW (lpString="") returned 0 [0075.867] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.867] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.867] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.867] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.867] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0075.867] lstrlenW (lpString="20") returned 2 [0075.867] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0075.867] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.867] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.867] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.867] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.867] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.867] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.867] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.867] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.867] lstrlenW (lpString=" ") returned 1 [0075.868] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.868] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.868] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0075.868] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.868] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.868] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.868] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.868] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.868] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.868] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.868] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.868] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i r1, i", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i") returned="KERNEL32::ReadFile(ir5, i r1, i" [0075.869] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i") returned 31 [0075.869] lstrcpynW (in: lpString1=0x432ede, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.869] lstrlenW (lpString=" ") returned 1 [0075.869] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i r1, i ", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i ") returned="KERNEL32::ReadFile(ir5, i r1, i " [0075.869] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i ") returned 32 [0075.869] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i r1, i ", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i ") returned="KERNEL32::ReadFile(ir5, i r1, i " [0075.869] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.869] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.869] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.869] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.869] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.869] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.869] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.869] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.870] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.870] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.870] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.870] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.870] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.870] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.870] lstrlenW (lpString="C:\\Windows") returned 10 [0075.870] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.870] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.870] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.871] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.871] lstrlenW (lpString="524386") returned 6 [0075.871] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.871] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.871] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.871] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.871] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.871] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.871] lstrlenW (lpString="6") returned 1 [0075.871] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.871] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.871] lstrlenW (lpString="8") returned 1 [0075.871] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.871] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.871] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.871] lstrlenW (lpString="Execute: ") returned 9 [0075.871] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.871] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.871] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.872] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x43 [0075.872] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x43 [0075.872] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x43, lParam=0x0) returned 0x1 [0075.873] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.873] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.873] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.873] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.873] lstrcpynW (in: lpString1=0x432ea0, lpString2="436", iMaxLength=1024 | out: lpString1="436") returned="436" [0075.873] lstrlenW (lpString="436") returned 3 [0075.873] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="444") returned 3 [0075.873] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.873] lstrlenW (lpString="") returned 0 [0075.873] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.873] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.873] lstrcpynW (in: lpString1=0x432ea0, lpString2="444", iMaxLength=1024 | out: lpString1="444") returned="444" [0075.873] lstrlenW (lpString="444") returned 3 [0075.873] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrlenW (lpString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returned 1023 [0075.873] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.874] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned="C5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0075.874] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.874] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.874] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.874] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.874] lstrcpynW (in: lpString1=0x432ea4, lpString2="C5F044AC", iMaxLength=1024 | out: lpString1="C5F044AC") returned="C5F044AC" [0075.874] lstrlenW (lpString="C5F044AC") returned 8 [0075.874] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="813183280") returned 9 [0075.874] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.874] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.874] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.874] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.874] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.875] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.875] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.875] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.875] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.875] lstrcpynW (in: lpString1=0x432ea0, lpString2="813183280", iMaxLength=1024 | out: lpString1="813183280") returned="813183280" [0075.875] lstrlenW (lpString="813183280") returned 9 [0075.875] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="30783130") returned 8 [0075.875] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.875] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.875] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.876] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.876] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.876] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.876] lstrlenW (lpString="0") returned 1 [0075.876] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.876] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.876] lstrlenW (lpString="0") returned 1 [0075.876] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.876] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.876] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.876] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.876] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.876] lstrlenW (lpString="0") returned 1 [0075.876] lstrcpynW (in: lpString1=0x432ea0, lpString2="30783130", iMaxLength=1024 | out: lpString1="30783130") returned="30783130" [0075.876] lstrlenW (lpString="30783130") returned 8 [0075.876] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30783130", iMaxLength=1024 | out: lpString1="30783130") returned="30783130" [0075.876] lstrlenW (lpString="30783130") returned 8 [0075.876] lstrcpynW (in: lpString1=0x46b000, lpString2="30783130", iMaxLength=1024 | out: lpString1="30783130") returned="30783130" [0075.876] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.876] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.876] lstrlenW (lpString="") returned 0 [0075.876] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.876] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.876] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.877] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.877] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.877] lstrlenW (lpString="30") returned 2 [0075.877] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0075.877] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.877] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.877] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.877] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.877] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.877] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.877] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.877] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.877] lstrlenW (lpString="0") returned 1 [0075.877] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.877] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.877] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0075.877] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.878] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.878] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.878] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.878] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.878] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.878] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.878] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.878] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i r1, i ", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i ") returned="KERNEL32::ReadFile(ir5, i r1, i " [0075.878] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i ") returned 32 [0075.878] lstrcpynW (in: lpString1=0x432ee0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.878] lstrlenW (lpString="0") returned 1 [0075.878] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0") returned="KERNEL32::ReadFile(ir5, i r1, i 0" [0075.878] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0") returned 33 [0075.878] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0") returned="KERNEL32::ReadFile(ir5, i r1, i 0" [0075.878] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.879] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.879] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.879] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.879] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.879] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.879] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.879] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.879] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.879] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.880] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.880] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.880] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.880] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.880] lstrlenW (lpString="C:\\Windows") returned 10 [0075.880] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.880] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.880] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.880] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.880] lstrlenW (lpString="524386") returned 6 [0075.880] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.880] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.881] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.881] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.881] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.881] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.881] lstrlenW (lpString="0") returned 1 [0075.881] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.881] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.881] lstrlenW (lpString="2") returned 1 [0075.881] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.881] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.881] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.881] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.881] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.881] lstrlenW (lpString="2") returned 1 [0075.881] lstrcpynW (in: lpString1=0x432ea0, lpString2="30783130", iMaxLength=1024 | out: lpString1="30783130") returned="30783130" [0075.881] lstrlenW (lpString="30783130") returned 8 [0075.881] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30783130", iMaxLength=1024 | out: lpString1="30783130") returned="30783130" [0075.881] lstrlenW (lpString="30783130") returned 8 [0075.881] lstrcpynW (in: lpString1=0x46b000, lpString2="783130", iMaxLength=1024 | out: lpString1="783130") returned="783130" [0075.881] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.881] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.881] lstrlenW (lpString="") returned 0 [0075.881] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.881] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.882] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.882] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.882] lstrcpynW (in: lpString1=0x432ea4, lpString2="78", iMaxLength=1024 | out: lpString1="78") returned="78" [0075.882] lstrlenW (lpString="78") returned 2 [0075.882] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="x") returned 1 [0075.882] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.882] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.882] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.882] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.882] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.883] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.883] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.883] lstrcpynW (in: lpString1=0x432ea0, lpString2="x", iMaxLength=1024 | out: lpString1="x") returned="x" [0075.883] lstrlenW (lpString="x") returned 1 [0075.883] lstrcpynW (in: lpString1=0x40b5f0, lpString2="x", iMaxLength=1024 | out: lpString1="x") returned="x" [0075.883] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.883] lstrcmpiW (lpString1="x", lpString2="^") returned 1 [0075.883] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.883] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.883] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.883] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.883] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.883] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.884] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.884] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.884] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0") returned="KERNEL32::ReadFile(ir5, i r1, i 0" [0075.884] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0") returned 33 [0075.884] lstrcpynW (in: lpString1=0x432ee2, lpString2="x", iMaxLength=1024 | out: lpString1="x") returned="x" [0075.884] lstrlenW (lpString="x") returned 1 [0075.884] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x") returned="KERNEL32::ReadFile(ir5, i r1, i 0x" [0075.884] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x") returned 34 [0075.884] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x") returned="KERNEL32::ReadFile(ir5, i r1, i 0x" [0075.884] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.884] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.884] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.884] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.884] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.884] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.885] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.885] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.885] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.885] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.885] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.885] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.885] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.885] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.885] lstrlenW (lpString="C:\\Windows") returned 10 [0075.885] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.886] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.886] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.886] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.886] lstrlenW (lpString="524386") returned 6 [0075.886] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.886] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.886] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.886] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.886] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.886] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.886] lstrlenW (lpString="2") returned 1 [0075.886] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.886] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.886] lstrlenW (lpString="4") returned 1 [0075.886] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.886] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.886] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.886] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.886] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.886] lstrlenW (lpString="4") returned 1 [0075.887] lstrcpynW (in: lpString1=0x432ea0, lpString2="30783130", iMaxLength=1024 | out: lpString1="30783130") returned="30783130" [0075.887] lstrlenW (lpString="30783130") returned 8 [0075.887] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30783130", iMaxLength=1024 | out: lpString1="30783130") returned="30783130" [0075.887] lstrlenW (lpString="30783130") returned 8 [0075.887] lstrcpynW (in: lpString1=0x46b000, lpString2="3130", iMaxLength=1024 | out: lpString1="3130") returned="3130" [0075.887] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.887] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.887] lstrlenW (lpString="") returned 0 [0075.887] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.887] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.887] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.887] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.887] lstrcpynW (in: lpString1=0x432ea4, lpString2="31", iMaxLength=1024 | out: lpString1="31") returned="31" [0075.887] lstrlenW (lpString="31") returned 2 [0075.887] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="1") returned 1 [0075.887] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.887] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.887] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.887] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.888] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.888] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.888] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.888] lstrcpynW (in: lpString1=0x432ea0, lpString2="1", iMaxLength=1024 | out: lpString1="1") returned="1" [0075.888] lstrlenW (lpString="1") returned 1 [0075.888] lstrcpynW (in: lpString1=0x40b5f0, lpString2="1", iMaxLength=1024 | out: lpString1="1") returned="1" [0075.888] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.888] lstrcmpiW (lpString1="1", lpString2="^") returned 1 [0075.888] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.888] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.888] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.888] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.888] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.888] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.889] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.889] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.889] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x") returned="KERNEL32::ReadFile(ir5, i r1, i 0x" [0075.889] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x") returned 34 [0075.889] lstrcpynW (in: lpString1=0x432ee4, lpString2="1", iMaxLength=1024 | out: lpString1="1") returned="1" [0075.889] lstrlenW (lpString="1") returned 1 [0075.889] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x1", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x1") returned="KERNEL32::ReadFile(ir5, i r1, i 0x1" [0075.889] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x1") returned 35 [0075.889] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x1", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x1") returned="KERNEL32::ReadFile(ir5, i r1, i 0x1" [0075.889] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.889] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.889] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.889] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.890] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.890] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.890] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.890] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.890] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.890] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.890] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.890] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.890] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.891] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.891] lstrlenW (lpString="C:\\Windows") returned 10 [0075.891] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.891] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.891] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.891] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.891] lstrlenW (lpString="524386") returned 6 [0075.891] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.891] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.891] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.891] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.891] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.891] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.891] lstrlenW (lpString="4") returned 1 [0075.891] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.891] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.892] lstrlenW (lpString="6") returned 1 [0075.892] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.892] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.892] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.892] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.892] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.892] lstrlenW (lpString="6") returned 1 [0075.892] lstrcpynW (in: lpString1=0x432ea0, lpString2="30783130", iMaxLength=1024 | out: lpString1="30783130") returned="30783130" [0075.892] lstrlenW (lpString="30783130") returned 8 [0075.892] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30783130", iMaxLength=1024 | out: lpString1="30783130") returned="30783130" [0075.892] lstrlenW (lpString="30783130") returned 8 [0075.892] lstrcpynW (in: lpString1=0x46b000, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.892] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.892] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.892] lstrlenW (lpString="") returned 0 [0075.892] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.892] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.892] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.892] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.892] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.892] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0075.892] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.892] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.893] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.893] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.893] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.893] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.893] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.893] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.893] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.893] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.893] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0075.893] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.893] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.893] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.893] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.894] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.894] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.894] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.894] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.894] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x1", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x1") returned="KERNEL32::ReadFile(ir5, i r1, i 0x1" [0075.894] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x1") returned 35 [0075.894] lstrcpynW (in: lpString1=0x432ee6, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.894] lstrlenW (lpString="0") returned 1 [0075.894] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x10", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x10") returned="KERNEL32::ReadFile(ir5, i r1, i 0x10" [0075.894] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x10") returned 36 [0075.894] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x10", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x10") returned="KERNEL32::ReadFile(ir5, i r1, i 0x10" [0075.894] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.894] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.894] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.894] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.895] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.895] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.895] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.895] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.895] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.895] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.895] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.895] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.895] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.896] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.896] lstrlenW (lpString="C:\\Windows") returned 10 [0075.896] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.896] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.896] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.896] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.896] lstrlenW (lpString="524386") returned 6 [0075.896] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.896] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.896] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.896] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.896] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.896] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.896] lstrlenW (lpString="6") returned 1 [0075.897] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.897] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.897] lstrlenW (lpString="8") returned 1 [0075.897] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.897] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.897] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.897] lstrlenW (lpString="Execute: ") returned 9 [0075.897] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.897] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.897] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.897] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x44 [0075.898] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x44 [0075.898] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x44, lParam=0x0) returned 0x1 [0075.898] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.898] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.898] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.899] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.899] lstrcpynW (in: lpString1=0x432ea0, lpString2="444", iMaxLength=1024 | out: lpString1="444") returned="444" [0075.899] lstrlenW (lpString="444") returned 3 [0075.899] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="452") returned 3 [0075.899] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.899] lstrlenW (lpString="") returned 0 [0075.899] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.899] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.899] lstrcpynW (in: lpString1=0x432ea0, lpString2="452", iMaxLength=1024 | out: lpString1="452") returned="452" [0075.899] lstrlenW (lpString="452") returned 3 [0075.899] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.899] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.899] lstrcpynW (in: lpString1=0x46d000, lpString2="C5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned="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" [0075.899] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.899] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.899] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.900] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.900] lstrcpynW (in: lpString1=0x432ea4, lpString2="C5B845AC", iMaxLength=1024 | out: lpString1="C5B845AC") returned="C5B845AC" [0075.900] lstrlenW (lpString="C5B845AC") returned 8 [0075.900] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="808464432") returned 9 [0075.900] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.900] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.900] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.900] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.900] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.900] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.900] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.900] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.901] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.901] lstrcpynW (in: lpString1=0x432ea0, lpString2="808464432", iMaxLength=1024 | out: lpString1="808464432") returned="808464432" [0075.901] lstrlenW (lpString="808464432") returned 9 [0075.901] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="30303030") returned 8 [0075.901] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.901] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.901] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.901] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.901] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.901] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.901] lstrlenW (lpString="0") returned 1 [0075.901] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.901] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.902] lstrlenW (lpString="0") returned 1 [0075.902] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.902] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.902] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.902] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.902] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.902] lstrlenW (lpString="0") returned 1 [0075.902] lstrcpynW (in: lpString1=0x432ea0, lpString2="30303030", iMaxLength=1024 | out: lpString1="30303030") returned="30303030" [0075.902] lstrlenW (lpString="30303030") returned 8 [0075.902] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30303030", iMaxLength=1024 | out: lpString1="30303030") returned="30303030" [0075.902] lstrlenW (lpString="30303030") returned 8 [0075.902] lstrcpynW (in: lpString1=0x46b000, lpString2="30303030", iMaxLength=1024 | out: lpString1="30303030") returned="30303030" [0075.902] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.902] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.902] lstrlenW (lpString="") returned 0 [0075.902] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.902] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.902] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.902] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.902] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.902] lstrlenW (lpString="30") returned 2 [0075.903] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0075.903] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.903] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.903] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.903] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.903] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.903] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.903] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.903] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.903] lstrlenW (lpString="0") returned 1 [0075.903] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.903] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.903] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0075.903] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.904] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.904] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.904] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.904] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.904] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.904] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.904] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.904] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x10", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x10") returned="KERNEL32::ReadFile(ir5, i r1, i 0x10" [0075.904] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x10") returned 36 [0075.904] lstrcpynW (in: lpString1=0x432ee8, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.904] lstrlenW (lpString="0") returned 1 [0075.904] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100" [0075.905] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100") returned 37 [0075.905] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100" [0075.905] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.905] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.905] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.905] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.905] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.905] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.905] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.905] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.906] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.906] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.906] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.906] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.906] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.906] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.906] lstrlenW (lpString="C:\\Windows") returned 10 [0075.906] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.906] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.907] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.907] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.907] lstrlenW (lpString="524386") returned 6 [0075.907] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.907] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.907] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.907] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.907] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.907] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.907] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.907] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.907] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.908] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.908] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.908] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0075.908] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.908] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.908] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.908] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.908] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0075.908] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.908] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.909] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.909] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.909] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.909] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.909] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.909] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.909] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100" [0075.909] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100") returned 37 [0075.909] lstrcpynW (in: lpString1=0x432eea, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.909] lstrlenW (lpString="0") returned 1 [0075.910] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x1000", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x1000") returned="KERNEL32::ReadFile(ir5, i r1, i 0x1000" [0075.910] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x1000") returned 38 [0075.910] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x1000", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x1000") returned="KERNEL32::ReadFile(ir5, i r1, i 0x1000" [0075.910] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.910] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.910] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.910] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.910] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.910] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.910] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.910] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.911] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.911] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.911] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.911] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.911] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.911] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.911] lstrlenW (lpString="C:\\Windows") returned 10 [0075.911] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.912] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.912] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.912] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.912] lstrlenW (lpString="524386") returned 6 [0075.912] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.912] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.912] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.912] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.912] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.912] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.912] lstrlenW (lpString="2") returned 1 [0075.912] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.912] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.912] lstrlenW (lpString="4") returned 1 [0075.912] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.912] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.913] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.913] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.913] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.913] lstrlenW (lpString="4") returned 1 [0075.913] lstrcpynW (in: lpString1=0x432ea0, lpString2="30303030", iMaxLength=1024 | out: lpString1="30303030") returned="30303030" [0075.913] lstrlenW (lpString="30303030") returned 8 [0075.913] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30303030", iMaxLength=1024 | out: lpString1="30303030") returned="30303030" [0075.913] lstrlenW (lpString="30303030") returned 8 [0075.913] lstrcpynW (in: lpString1=0x46b000, lpString2="3030", iMaxLength=1024 | out: lpString1="3030") returned="3030" [0075.913] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.913] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.913] lstrlenW (lpString="") returned 0 [0075.913] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.913] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.913] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.913] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.913] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.913] lstrlenW (lpString="30") returned 2 [0075.913] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0075.914] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.914] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.914] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.914] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.914] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.914] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.914] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.914] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.914] lstrlenW (lpString="0") returned 1 [0075.914] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.914] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.914] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0075.914] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.915] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.915] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.915] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.915] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.915] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.915] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.915] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.915] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x1000", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x1000") returned="KERNEL32::ReadFile(ir5, i r1, i 0x1000" [0075.915] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x1000") returned 38 [0075.915] lstrcpynW (in: lpString1=0x432eec, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.915] lstrlenW (lpString="0") returned 1 [0075.915] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x10000", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x10000") returned="KERNEL32::ReadFile(ir5, i r1, i 0x10000" [0075.916] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x10000") returned 39 [0075.916] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x10000", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x10000") returned="KERNEL32::ReadFile(ir5, i r1, i 0x10000" [0075.916] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.916] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.916] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.916] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.916] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.916] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.916] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.916] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.917] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.917] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.917] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.917] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.917] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.917] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.917] lstrlenW (lpString="C:\\Windows") returned 10 [0075.917] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.917] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.918] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.918] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.918] lstrlenW (lpString="524386") returned 6 [0075.918] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.918] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.918] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.918] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.918] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.918] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.918] lstrlenW (lpString="4") returned 1 [0075.918] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.918] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.918] lstrlenW (lpString="6") returned 1 [0075.918] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.918] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.918] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.919] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.919] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.919] lstrlenW (lpString="6") returned 1 [0075.919] lstrcpynW (in: lpString1=0x432ea0, lpString2="30303030", iMaxLength=1024 | out: lpString1="30303030") returned="30303030" [0075.919] lstrlenW (lpString="30303030") returned 8 [0075.919] lstrcpynW (in: lpString1=0x40a5f0, lpString2="30303030", iMaxLength=1024 | out: lpString1="30303030") returned="30303030" [0075.919] lstrlenW (lpString="30303030") returned 8 [0075.919] lstrcpynW (in: lpString1=0x46b000, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.919] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.919] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.919] lstrlenW (lpString="") returned 0 [0075.919] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.919] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.919] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.919] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.919] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.919] lstrlenW (lpString="30") returned 2 [0075.919] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0075.919] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.919] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.920] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.920] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.920] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.920] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.920] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.920] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.920] lstrlenW (lpString="0") returned 1 [0075.920] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.920] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.920] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0075.920] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.920] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.920] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.921] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.921] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.921] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.921] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.921] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.921] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x10000", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x10000") returned="KERNEL32::ReadFile(ir5, i r1, i 0x10000" [0075.921] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x10000") returned 39 [0075.921] lstrcpynW (in: lpString1=0x432eee, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.921] lstrlenW (lpString="0") returned 1 [0075.921] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000" [0075.921] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000") returned 40 [0075.921] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000" [0075.921] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.922] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.922] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.922] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.922] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.922] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.922] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.922] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.922] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.922] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.923] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.923] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.923] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.923] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.923] lstrlenW (lpString="C:\\Windows") returned 10 [0075.923] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.923] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.923] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.923] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.923] lstrlenW (lpString="524386") returned 6 [0075.923] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.923] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.924] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.924] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.924] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.924] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.924] lstrlenW (lpString="6") returned 1 [0075.924] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.924] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.924] lstrlenW (lpString="8") returned 1 [0075.924] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.924] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.924] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.924] lstrlenW (lpString="Execute: ") returned 9 [0075.924] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.924] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.924] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.925] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x45 [0075.925] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x45 [0075.925] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x45, lParam=0x0) returned 0x1 [0075.926] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.926] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.926] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.926] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.926] lstrcpynW (in: lpString1=0x432ea0, lpString2="452", iMaxLength=1024 | out: lpString1="452") returned="452" [0075.926] lstrlenW (lpString="452") returned 3 [0075.926] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="460") returned 3 [0075.926] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.926] lstrlenW (lpString="") returned 0 [0075.926] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.926] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.926] lstrcpynW (in: lpString1=0x432ea0, lpString2="460", iMaxLength=1024 | out: lpString1="460") returned="460" [0075.926] lstrlenW (lpString="460") returned 3 [0075.926] lstrcpynW (in: lpString1=0x432ea0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned 1023 [0075.926] lstrcpynW (in: lpString1=0x40a5f0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrlenW (lpString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returned 1023 [0075.927] lstrcpynW (in: lpString1=0x46d000, lpString2="D9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString1="D9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.927] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.927] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.927] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.927] lstrcpynW (in: lpString1=0x432ea4, lpString2="D9A21CBC", iMaxLength=1024 | out: lpString1="D9A21CBC") returned="D9A21CBC" [0075.927] lstrlenW (lpString="D9A21CBC") returned 8 [0075.927] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="740976928") returned 9 [0075.927] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.927] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.927] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.927] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.928] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.928] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.928] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.928] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.928] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.928] lstrcpynW (in: lpString1=0x432ea0, lpString2="740976928", iMaxLength=1024 | out: lpString1="740976928") returned="740976928" [0075.928] lstrlenW (lpString="740976928") returned 9 [0075.928] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="2C2A6920") returned 8 [0075.928] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.928] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.929] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.931] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.931] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.931] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.931] lstrlenW (lpString="0") returned 1 [0075.931] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.931] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.931] lstrlenW (lpString="0") returned 1 [0075.931] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.932] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.932] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.932] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.932] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.932] lstrlenW (lpString="0") returned 1 [0075.932] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C2A6920", iMaxLength=1024 | out: lpString1="2C2A6920") returned="2C2A6920" [0075.932] lstrlenW (lpString="2C2A6920") returned 8 [0075.932] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C2A6920", iMaxLength=1024 | out: lpString1="2C2A6920") returned="2C2A6920" [0075.932] lstrlenW (lpString="2C2A6920") returned 8 [0075.932] lstrcpynW (in: lpString1=0x46b000, lpString2="2C2A6920", iMaxLength=1024 | out: lpString1="2C2A6920") returned="2C2A6920" [0075.932] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.932] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.932] lstrlenW (lpString="") returned 0 [0075.932] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.932] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.932] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.932] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.932] lstrcpynW (in: lpString1=0x432ea4, lpString2="2C", iMaxLength=1024 | out: lpString1="2C") returned="2C" [0075.932] lstrlenW (lpString="2C") returned 2 [0075.932] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=",") returned 1 [0075.932] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.932] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.933] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.933] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.933] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.933] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.933] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.933] lstrcpynW (in: lpString1=0x432ea0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0075.933] lstrlenW (lpString=",") returned 1 [0075.933] lstrcpynW (in: lpString1=0x40b5f0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0075.933] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.933] lstrcmpiW (lpString1=",", lpString2="^") returned -1 [0075.933] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.933] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.934] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.934] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.934] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.934] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.934] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.934] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.934] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000" [0075.934] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000") returned 40 [0075.934] lstrcpynW (in: lpString1=0x432ef0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0075.934] lstrlenW (lpString=",") returned 1 [0075.934] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000," [0075.934] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000,") returned 41 [0075.934] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000," [0075.934] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.935] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.935] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.935] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.935] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.935] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.935] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.935] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.935] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.935] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.936] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.936] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.936] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.936] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.936] lstrlenW (lpString="C:\\Windows") returned 10 [0075.936] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.936] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.936] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.937] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.937] lstrlenW (lpString="524386") returned 6 [0075.937] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.937] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.937] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.937] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.937] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.937] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.937] lstrlenW (lpString="0") returned 1 [0075.937] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.937] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.937] lstrlenW (lpString="2") returned 1 [0075.937] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.937] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.937] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.937] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.937] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.937] lstrlenW (lpString="2") returned 1 [0075.937] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C2A6920", iMaxLength=1024 | out: lpString1="2C2A6920") returned="2C2A6920" [0075.937] lstrlenW (lpString="2C2A6920") returned 8 [0075.937] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C2A6920", iMaxLength=1024 | out: lpString1="2C2A6920") returned="2C2A6920" [0075.938] lstrlenW (lpString="2C2A6920") returned 8 [0075.938] lstrcpynW (in: lpString1=0x46b000, lpString2="2A6920", iMaxLength=1024 | out: lpString1="2A6920") returned="2A6920" [0075.938] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.938] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.938] lstrlenW (lpString="") returned 0 [0075.938] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.938] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.938] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.938] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.938] lstrcpynW (in: lpString1=0x432ea4, lpString2="2A", iMaxLength=1024 | out: lpString1="2A") returned="2A" [0075.938] lstrlenW (lpString="2A") returned 2 [0075.938] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="*") returned 1 [0075.938] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.938] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.938] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.939] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.939] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.939] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.939] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.939] lstrcpynW (in: lpString1=0x432ea0, lpString2="*", iMaxLength=1024 | out: lpString1="*") returned="*" [0075.939] lstrlenW (lpString="*") returned 1 [0075.939] lstrcpynW (in: lpString1=0x40b5f0, lpString2="*", iMaxLength=1024 | out: lpString1="*") returned="*" [0075.939] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.939] lstrcmpiW (lpString1="*", lpString2="^") returned -1 [0075.939] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.939] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.939] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.939] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.939] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.940] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.940] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.940] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.940] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000," [0075.940] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000,") returned 41 [0075.940] lstrcpynW (in: lpString1=0x432ef2, lpString2="*", iMaxLength=1024 | out: lpString1="*") returned="*" [0075.940] lstrlenW (lpString="*") returned 1 [0075.940] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*" [0075.940] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*") returned 42 [0075.940] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*" [0075.940] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.940] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.940] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.940] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.941] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.941] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.941] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.941] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.941] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.941] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.941] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.941] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.941] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.942] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.942] lstrlenW (lpString="C:\\Windows") returned 10 [0075.942] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.942] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.942] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.942] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.942] lstrlenW (lpString="524386") returned 6 [0075.942] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.942] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.942] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.942] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.942] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.942] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.942] lstrlenW (lpString="2") returned 1 [0075.943] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.943] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.943] lstrlenW (lpString="4") returned 1 [0075.943] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.943] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.943] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.943] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.943] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.943] lstrlenW (lpString="4") returned 1 [0075.943] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C2A6920", iMaxLength=1024 | out: lpString1="2C2A6920") returned="2C2A6920" [0075.943] lstrlenW (lpString="2C2A6920") returned 8 [0075.943] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C2A6920", iMaxLength=1024 | out: lpString1="2C2A6920") returned="2C2A6920" [0075.943] lstrlenW (lpString="2C2A6920") returned 8 [0075.943] lstrcpynW (in: lpString1=0x46b000, lpString2="6920", iMaxLength=1024 | out: lpString1="6920") returned="6920" [0075.943] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.943] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.943] lstrlenW (lpString="") returned 0 [0075.943] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.943] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.943] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.943] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.943] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0075.944] lstrlenW (lpString="69") returned 2 [0075.944] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0075.944] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.944] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.944] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.944] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.944] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.944] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.944] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.944] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.944] lstrlenW (lpString="i") returned 1 [0075.944] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.944] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.944] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0075.944] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.944] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.945] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.945] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.945] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.945] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.946] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.946] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.946] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*" [0075.946] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*") returned 42 [0075.946] lstrcpynW (in: lpString1=0x432ef4, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.946] lstrlenW (lpString="i") returned 1 [0075.946] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i" [0075.946] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i") returned 43 [0075.946] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i" [0075.946] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.946] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.946] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.946] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.946] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.946] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.946] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.947] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.947] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.947] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.947] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.947] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.947] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.947] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.947] lstrlenW (lpString="C:\\Windows") returned 10 [0075.947] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.948] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.948] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.948] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.948] lstrlenW (lpString="524386") returned 6 [0075.948] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.948] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.948] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.948] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.948] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.948] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.948] lstrlenW (lpString="4") returned 1 [0075.948] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.948] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.948] lstrlenW (lpString="6") returned 1 [0075.948] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.948] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.948] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.948] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.948] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.949] lstrlenW (lpString="6") returned 1 [0075.949] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C2A6920", iMaxLength=1024 | out: lpString1="2C2A6920") returned="2C2A6920" [0075.949] lstrlenW (lpString="2C2A6920") returned 8 [0075.949] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C2A6920", iMaxLength=1024 | out: lpString1="2C2A6920") returned="2C2A6920" [0075.949] lstrlenW (lpString="2C2A6920") returned 8 [0075.949] lstrcpynW (in: lpString1=0x46b000, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0075.949] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.949] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.949] lstrlenW (lpString="") returned 0 [0075.949] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.949] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.949] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.949] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.949] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0075.949] lstrlenW (lpString="20") returned 2 [0075.949] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0075.949] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.949] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.949] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.949] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.950] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.950] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.950] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.950] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.950] lstrlenW (lpString=" ") returned 1 [0075.950] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.950] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.950] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0075.950] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.950] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.950] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.950] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.950] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.950] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.951] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.951] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.951] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i" [0075.951] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i") returned 43 [0075.951] lstrcpynW (in: lpString1=0x432ef6, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.951] lstrlenW (lpString=" ") returned 1 [0075.951] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i ", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i ") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i " [0075.951] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i ") returned 44 [0075.951] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i ", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i ") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i " [0075.951] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.951] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.951] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.951] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.951] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.951] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.952] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.952] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.952] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.952] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.952] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.952] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.952] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.952] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.952] lstrlenW (lpString="C:\\Windows") returned 10 [0075.952] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.953] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.953] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.953] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.953] lstrlenW (lpString="524386") returned 6 [0075.953] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.953] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.953] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.953] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.953] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.953] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.953] lstrlenW (lpString="6") returned 1 [0075.953] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.953] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.953] lstrlenW (lpString="8") returned 1 [0075.953] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.953] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.953] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.954] lstrlenW (lpString="Execute: ") returned 9 [0075.954] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.954] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.954] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.954] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x46 [0075.954] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x46 [0075.955] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x46, lParam=0x0) returned 0x1 [0075.956] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.956] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.956] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.957] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.957] lstrcpynW (in: lpString1=0x432ea0, lpString2="460", iMaxLength=1024 | out: lpString1="460") returned="460" [0075.957] lstrlenW (lpString="460") returned 3 [0075.957] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="468") returned 3 [0075.958] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.958] lstrlenW (lpString="") returned 0 [0075.958] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.958] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.958] lstrcpynW (in: lpString1=0x432ea0, lpString2="468", iMaxLength=1024 | out: lpString1="468") returned="468" [0075.958] lstrlenW (lpString="468") returned 3 [0075.958] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0075.958] lstrcpynW (in: lpString1=0x40a5f0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrlenW (lpString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returned 1023 [0075.958] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned="C5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0075.958] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.958] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.958] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.958] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.958] lstrcpynW (in: lpString1=0x432ea4, lpString2="C5A455F5", iMaxLength=1024 | out: lpString1="C5A455F5") returned="C5A455F5" [0075.958] lstrlenW (lpString="C5A455F5") returned 8 [0075.959] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="808198249") returned 9 [0075.959] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.959] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.959] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.959] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.959] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.959] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.959] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.959] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.959] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.959] lstrcpynW (in: lpString1=0x432ea0, lpString2="808198249", iMaxLength=1024 | out: lpString1="808198249") returned="808198249" [0075.960] lstrlenW (lpString="808198249") returned 9 [0075.960] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="302C2069") returned 8 [0075.960] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.960] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.960] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.960] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.960] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.960] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.960] lstrlenW (lpString="0") returned 1 [0075.960] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.960] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.960] lstrlenW (lpString="0") returned 1 [0075.960] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.960] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.960] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.961] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.961] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.961] lstrlenW (lpString="0") returned 1 [0075.961] lstrcpynW (in: lpString1=0x432ea0, lpString2="302C2069", iMaxLength=1024 | out: lpString1="302C2069") returned="302C2069" [0075.961] lstrlenW (lpString="302C2069") returned 8 [0075.961] lstrcpynW (in: lpString1=0x40a5f0, lpString2="302C2069", iMaxLength=1024 | out: lpString1="302C2069") returned="302C2069" [0075.961] lstrlenW (lpString="302C2069") returned 8 [0075.961] lstrcpynW (in: lpString1=0x46b000, lpString2="302C2069", iMaxLength=1024 | out: lpString1="302C2069") returned="302C2069" [0075.961] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.961] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.961] lstrlenW (lpString="") returned 0 [0075.961] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.961] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.961] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.961] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.961] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.961] lstrlenW (lpString="30") returned 2 [0075.961] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0075.961] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.961] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.961] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.962] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.962] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.962] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.962] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.962] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.962] lstrlenW (lpString="0") returned 1 [0075.962] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.962] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.962] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0075.962] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.962] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.962] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.962] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.962] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.962] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.963] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.963] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.963] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.963] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.963] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.963] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.963] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.964] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.964] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.964] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.964] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.964] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.964] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.964] lstrlenW (lpString="C:\\Windows") returned 10 [0075.964] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.964] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.964] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.964] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.965] lstrlenW (lpString="524386") returned 6 [0075.965] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.965] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.965] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.965] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.965] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.965] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.965] lstrlenW (lpString="0") returned 1 [0075.965] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.965] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.965] lstrlenW (lpString="2") returned 1 [0075.965] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.965] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.965] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.965] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.965] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.965] lstrlenW (lpString="2") returned 1 [0075.965] lstrcpynW (in: lpString1=0x432ea0, lpString2="302C2069", iMaxLength=1024 | out: lpString1="302C2069") returned="302C2069" [0075.965] lstrlenW (lpString="302C2069") returned 8 [0075.965] lstrcpynW (in: lpString1=0x40a5f0, lpString2="302C2069", iMaxLength=1024 | out: lpString1="302C2069") returned="302C2069" [0075.965] lstrlenW (lpString="302C2069") returned 8 [0075.965] lstrcpynW (in: lpString1=0x46b000, lpString2="2C2069", iMaxLength=1024 | out: lpString1="2C2069") returned="2C2069" [0075.965] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.966] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.966] lstrlenW (lpString="") returned 0 [0075.966] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.966] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.966] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.966] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.966] lstrcpynW (in: lpString1=0x432ea4, lpString2="2C", iMaxLength=1024 | out: lpString1="2C") returned="2C" [0075.966] lstrlenW (lpString="2C") returned 2 [0075.966] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=",") returned 1 [0075.966] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.966] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.966] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.966] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.966] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.966] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.966] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.966] lstrcpynW (in: lpString1=0x432ea0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0075.967] lstrlenW (lpString=",") returned 1 [0075.967] lstrcpynW (in: lpString1=0x40b5f0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0075.967] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.967] lstrcmpiW (lpString1=",", lpString2="^") returned -1 [0075.967] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.967] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.967] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.967] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.967] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.967] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.967] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.968] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.968] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0" [0075.968] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0") returned 45 [0075.968] lstrcpynW (in: lpString1=0x432efa, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0075.968] lstrlenW (lpString=",") returned 1 [0075.968] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0,", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0,") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0," [0075.968] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0,") returned 46 [0075.968] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0,", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0,") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0," [0075.968] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.968] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.968] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.968] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.968] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.968] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.969] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.969] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.969] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.969] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.969] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.969] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.969] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.969] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.970] lstrlenW (lpString="C:\\Windows") returned 10 [0075.970] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.970] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.970] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.970] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.970] lstrlenW (lpString="524386") returned 6 [0075.970] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.970] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.970] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.970] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.970] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.970] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.970] lstrlenW (lpString="2") returned 1 [0075.970] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.970] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.971] lstrlenW (lpString="4") returned 1 [0075.971] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.971] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.971] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.971] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.971] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.971] lstrlenW (lpString="4") returned 1 [0075.971] lstrcpynW (in: lpString1=0x432ea0, lpString2="302C2069", iMaxLength=1024 | out: lpString1="302C2069") returned="302C2069" [0075.971] lstrlenW (lpString="302C2069") returned 8 [0075.971] lstrcpynW (in: lpString1=0x40a5f0, lpString2="302C2069", iMaxLength=1024 | out: lpString1="302C2069") returned="302C2069" [0075.971] lstrlenW (lpString="302C2069") returned 8 [0075.971] lstrcpynW (in: lpString1=0x46b000, lpString2="2069", iMaxLength=1024 | out: lpString1="2069") returned="2069" [0075.971] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.971] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.971] lstrlenW (lpString="") returned 0 [0075.971] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.971] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.971] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.971] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.972] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0075.972] lstrlenW (lpString="20") returned 2 [0075.972] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0075.972] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.972] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.972] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.972] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.972] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.972] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.972] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.972] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.972] lstrlenW (lpString=" ") returned 1 [0075.972] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.972] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.972] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0075.973] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.973] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.973] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.973] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.973] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.973] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.973] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.973] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.973] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0,", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0,") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0," [0075.973] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0,") returned 46 [0075.973] lstrcpynW (in: lpString1=0x432efc, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.974] lstrlenW (lpString=" ") returned 1 [0075.974] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, ", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, ") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, " [0075.974] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, ") returned 47 [0075.974] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, ", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, ") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, " [0075.974] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.974] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.974] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.974] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.974] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.974] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.974] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.974] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.975] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.975] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.975] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.975] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.975] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.975] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.975] lstrlenW (lpString="C:\\Windows") returned 10 [0075.975] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.975] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.975] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.976] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.976] lstrlenW (lpString="524386") returned 6 [0075.976] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.976] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.976] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.976] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.976] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.976] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.977] lstrlenW (lpString="4") returned 1 [0075.977] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0075.977] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.977] lstrlenW (lpString="6") returned 1 [0075.977] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.977] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.977] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.977] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.977] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.977] lstrlenW (lpString="6") returned 1 [0075.977] lstrcpynW (in: lpString1=0x432ea0, lpString2="302C2069", iMaxLength=1024 | out: lpString1="302C2069") returned="302C2069" [0075.977] lstrlenW (lpString="302C2069") returned 8 [0075.977] lstrcpynW (in: lpString1=0x40a5f0, lpString2="302C2069", iMaxLength=1024 | out: lpString1="302C2069") returned="302C2069" [0075.977] lstrlenW (lpString="302C2069") returned 8 [0075.977] lstrcpynW (in: lpString1=0x46b000, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0075.977] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.977] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.977] lstrlenW (lpString="") returned 0 [0075.977] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.977] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.977] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.977] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.978] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0075.978] lstrlenW (lpString="69") returned 2 [0075.978] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0075.978] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.978] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.978] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.978] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.978] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.978] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.978] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.978] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.978] lstrlenW (lpString="i") returned 1 [0075.978] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.978] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.978] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0075.978] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.978] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.979] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.979] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.979] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.979] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.979] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.979] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.979] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, ", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, ") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, " [0075.979] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, ") returned 47 [0075.979] lstrcpynW (in: lpString1=0x432efe, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0075.979] lstrlenW (lpString="i") returned 1 [0075.979] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i" [0075.979] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i") returned 48 [0075.979] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i" [0075.979] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.979] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.980] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.980] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.980] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.980] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.980] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.980] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.980] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.980] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.980] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.981] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.981] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.981] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.981] lstrlenW (lpString="C:\\Windows") returned 10 [0075.981] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.981] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.981] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.981] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.981] lstrlenW (lpString="524386") returned 6 [0075.981] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.981] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.981] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.981] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.981] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.981] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0075.981] lstrlenW (lpString="6") returned 1 [0075.982] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0075.982] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0075.982] lstrlenW (lpString="8") returned 1 [0075.982] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0075.982] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0075.982] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0075.982] lstrlenW (lpString="Execute: ") returned 9 [0075.982] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0075.982] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0075.982] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0075.982] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x47 [0075.983] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x47 [0075.983] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x47, lParam=0x0) returned 0x1 [0075.983] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0075.983] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0075.983] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0075.984] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0075.984] lstrcpynW (in: lpString1=0x432ea0, lpString2="468", iMaxLength=1024 | out: lpString1="468") returned="468" [0075.984] lstrlenW (lpString="468") returned 3 [0075.984] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="476") returned 3 [0075.984] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.984] lstrlenW (lpString="") returned 0 [0075.984] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.984] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.984] lstrcpynW (in: lpString1=0x432ea0, lpString2="476", iMaxLength=1024 | out: lpString1="476") returned="476" [0075.984] lstrlenW (lpString="476") returned 3 [0075.984] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned 1023 [0075.984] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0075.984] lstrlenW (lpString="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned 1023 [0075.984] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0075.984] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0075.984] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0075.984] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.985] lstrcpynW (in: lpString1=0x432ea4, lpString2="D5B85CF5", iMaxLength=1024 | out: lpString1="D5B85CF5") returned="D5B85CF5" [0075.985] lstrlenW (lpString="D5B85CF5") returned 8 [0075.985] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="540027241") returned 9 [0075.985] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0075.985] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0075.985] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0075.985] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0075.985] RegCloseKey (hKey=0x1c0) returned 0x0 [0075.985] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0075.985] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0075.985] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0075.985] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0075.986] lstrcpynW (in: lpString1=0x432ea0, lpString2="540027241", iMaxLength=1024 | out: lpString1="540027241") returned="540027241" [0075.986] lstrlenW (lpString="540027241") returned 9 [0075.986] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="20302969") returned 8 [0075.986] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.986] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.986] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.986] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.986] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.986] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.986] lstrlenW (lpString="0") returned 1 [0075.986] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.986] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.986] lstrlenW (lpString="0") returned 1 [0075.986] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.986] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.986] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.986] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.987] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.987] lstrlenW (lpString="0") returned 1 [0075.987] lstrcpynW (in: lpString1=0x432ea0, lpString2="20302969", iMaxLength=1024 | out: lpString1="20302969") returned="20302969" [0075.987] lstrlenW (lpString="20302969") returned 8 [0075.987] lstrcpynW (in: lpString1=0x40a5f0, lpString2="20302969", iMaxLength=1024 | out: lpString1="20302969") returned="20302969" [0075.987] lstrlenW (lpString="20302969") returned 8 [0075.987] lstrcpynW (in: lpString1=0x46b000, lpString2="20302969", iMaxLength=1024 | out: lpString1="20302969") returned="20302969" [0075.987] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.987] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.987] lstrlenW (lpString="") returned 0 [0075.987] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.987] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.987] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.987] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.987] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0075.987] lstrlenW (lpString="20") returned 2 [0075.987] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0075.987] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.987] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.987] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.987] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.988] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.988] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.988] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.988] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.988] lstrlenW (lpString=" ") returned 1 [0075.988] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.988] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.988] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0075.988] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.988] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.988] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.988] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.988] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.988] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.989] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.989] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.989] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i" [0075.989] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i") returned 48 [0075.989] lstrcpynW (in: lpString1=0x432f00, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0075.989] lstrlenW (lpString=" ") returned 1 [0075.989] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i ", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i ") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i " [0075.989] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i ") returned 49 [0075.989] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i ", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i ") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i " [0075.989] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.989] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.989] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.989] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.989] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.989] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.989] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.989] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.990] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.990] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.990] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.990] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.990] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.990] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.990] lstrlenW (lpString="C:\\Windows") returned 10 [0075.990] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.990] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.990] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.991] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.991] lstrlenW (lpString="524386") returned 6 [0075.991] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.991] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.991] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.991] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.991] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.991] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.991] lstrlenW (lpString="0") returned 1 [0075.991] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0075.991] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.991] lstrlenW (lpString="2") returned 1 [0075.991] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.991] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.991] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.991] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.991] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.991] lstrlenW (lpString="2") returned 1 [0075.991] lstrcpynW (in: lpString1=0x432ea0, lpString2="20302969", iMaxLength=1024 | out: lpString1="20302969") returned="20302969" [0075.991] lstrlenW (lpString="20302969") returned 8 [0075.992] lstrcpynW (in: lpString1=0x40a5f0, lpString2="20302969", iMaxLength=1024 | out: lpString1="20302969") returned="20302969" [0075.992] lstrlenW (lpString="20302969") returned 8 [0075.992] lstrcpynW (in: lpString1=0x46b000, lpString2="302969", iMaxLength=1024 | out: lpString1="302969") returned="302969" [0075.992] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.992] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.992] lstrlenW (lpString="") returned 0 [0075.992] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.992] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.992] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.992] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.992] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0075.992] lstrlenW (lpString="30") returned 2 [0075.992] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0075.992] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.992] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.992] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.992] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.992] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.992] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.993] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.993] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.993] lstrlenW (lpString="0") returned 1 [0075.993] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.993] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.993] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0075.993] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.993] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.993] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.993] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.993] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.993] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.993] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.993] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.994] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i ", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i ") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i " [0075.994] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i ") returned 49 [0075.994] lstrcpynW (in: lpString1=0x432f02, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0075.994] lstrlenW (lpString="0") returned 1 [0075.994] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0" [0075.994] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0") returned 50 [0075.994] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0" [0075.994] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.994] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.994] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.994] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.994] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.994] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.994] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.994] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.995] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0075.995] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0075.995] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.995] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0075.995] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0075.995] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.995] lstrlenW (lpString="C:\\Windows") returned 10 [0075.995] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0075.995] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0075.995] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0075.996] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0075.996] lstrlenW (lpString="524386") returned 6 [0075.996] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0075.996] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.996] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0075.996] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0075.996] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0075.996] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0075.996] lstrlenW (lpString="2") returned 1 [0075.996] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0075.996] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.996] lstrlenW (lpString="4") returned 1 [0075.996] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.996] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.996] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0075.996] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0075.996] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0075.996] lstrlenW (lpString="4") returned 1 [0075.996] lstrcpynW (in: lpString1=0x432ea0, lpString2="20302969", iMaxLength=1024 | out: lpString1="20302969") returned="20302969" [0075.996] lstrlenW (lpString="20302969") returned 8 [0075.996] lstrcpynW (in: lpString1=0x40a5f0, lpString2="20302969", iMaxLength=1024 | out: lpString1="20302969") returned="20302969" [0075.996] lstrlenW (lpString="20302969") returned 8 [0075.996] lstrcpynW (in: lpString1=0x46b000, lpString2="2969", iMaxLength=1024 | out: lpString1="2969") returned="2969" [0075.997] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0075.997] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0075.997] lstrlenW (lpString="") returned 0 [0075.997] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0075.997] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0075.997] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0075.997] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0075.997] lstrcpynW (in: lpString1=0x432ea4, lpString2="29", iMaxLength=1024 | out: lpString1="29") returned="29" [0075.997] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=")") returned 1 [0075.997] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0075.997] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0075.997] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0075.997] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0075.997] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0075.997] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0075.997] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0075.997] lstrcpynW (in: lpString1=0x432ea0, lpString2=")", iMaxLength=1024 | out: lpString1=")") returned=")" [0075.997] lstrcpynW (in: lpString1=0x40b5f0, lpString2=")", iMaxLength=1024 | out: lpString1=")") returned=")" [0075.998] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0075.998] lstrcmpiW (lpString1=")", lpString2="^") returned -1 [0075.998] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0075.998] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0075.998] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0075.998] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0075.998] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0075.998] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0075.998] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0075.998] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0075.998] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0" [0075.998] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0") returned 50 [0075.998] lstrcpynW (in: lpString1=0x432f04, lpString2=")", iMaxLength=1024 | out: lpString1=")") returned=")" [0075.998] lstrlenW (lpString=")") returned 1 [0075.999] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)" [0075.999] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)") returned 51 [0075.999] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)" [0075.999] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0075.999] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.999] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0075.999] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.999] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0075.999] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.999] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0075.999] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0075.999] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.000] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.000] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.000] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.000] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.000] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.000] lstrlenW (lpString="C:\\Windows") returned 10 [0076.000] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.000] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.000] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.000] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.000] lstrlenW (lpString="524386") returned 6 [0076.000] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.000] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.001] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.001] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.001] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.001] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.001] lstrlenW (lpString="4") returned 1 [0076.001] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0076.001] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.001] lstrlenW (lpString="6") returned 1 [0076.001] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.001] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.001] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.001] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.001] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.001] lstrlenW (lpString="6") returned 1 [0076.001] lstrcpynW (in: lpString1=0x432ea0, lpString2="20302969", iMaxLength=1024 | out: lpString1="20302969") returned="20302969" [0076.001] lstrlenW (lpString="20302969") returned 8 [0076.001] lstrcpynW (in: lpString1=0x40a5f0, lpString2="20302969", iMaxLength=1024 | out: lpString1="20302969") returned="20302969" [0076.001] lstrlenW (lpString="20302969") returned 8 [0076.001] lstrcpynW (in: lpString1=0x46b000, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0076.001] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.001] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.001] lstrlenW (lpString="") returned 0 [0076.001] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.001] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.001] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.002] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.002] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0076.002] lstrlenW (lpString="69") returned 2 [0076.002] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0076.002] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.002] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.002] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.002] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.002] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.002] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.002] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.002] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0076.002] lstrlenW (lpString="i") returned 1 [0076.002] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0076.002] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.002] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0076.002] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.002] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.003] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.003] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.003] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.003] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.003] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.003] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.003] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)" [0076.003] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)") returned 51 [0076.003] lstrcpynW (in: lpString1=0x432f06, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0076.003] lstrlenW (lpString="i") returned 1 [0076.003] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i" [0076.003] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i") returned 52 [0076.003] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i" [0076.003] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.004] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.004] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.004] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.004] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.004] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.004] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.004] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.004] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.004] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.004] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.005] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.005] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.005] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.005] lstrlenW (lpString="C:\\Windows") returned 10 [0076.005] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.005] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.005] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.005] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.005] lstrlenW (lpString="524386") returned 6 [0076.005] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.005] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.005] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.005] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.005] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.006] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.006] lstrlenW (lpString="6") returned 1 [0076.006] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0076.006] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0076.006] lstrlenW (lpString="8") returned 1 [0076.006] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0076.006] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0076.006] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0076.006] lstrlenW (lpString="Execute: ") returned 9 [0076.006] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0076.006] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0076.006] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0076.006] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x48 [0076.007] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x48 [0076.007] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x48, lParam=0x0) returned 0x1 [0076.008] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0076.008] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0076.008] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0076.008] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0076.008] lstrcpynW (in: lpString1=0x432ea0, lpString2="476", iMaxLength=1024 | out: lpString1="476") returned="476" [0076.008] lstrlenW (lpString="476") returned 3 [0076.008] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="484") returned 3 [0076.008] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.008] lstrlenW (lpString="") returned 0 [0076.008] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.008] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.008] lstrcpynW (in: lpString1=0x432ea0, lpString2="484", iMaxLength=1024 | out: lpString1="484") returned="484" [0076.008] lstrlenW (lpString="484") returned 3 [0076.008] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0076.009] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned 1023 [0076.009] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0076.009] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0076.009] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0076.009] RegCloseKey (hKey=0x1c0) returned 0x0 [0076.009] lstrcpynW (in: lpString1=0x432ea4, lpString2="DBFA46C2", iMaxLength=1024 | out: lpString1="DBFA46C2") returned="DBFA46C2" [0076.009] lstrlenW (lpString="DBFA46C2") returned 8 [0076.009] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="779236190") returned 9 [0076.009] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0076.009] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0076.009] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0076.009] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0076.010] RegCloseKey (hKey=0x1c0) returned 0x0 [0076.010] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0076.010] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0076.010] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0076.010] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0076.010] lstrcpynW (in: lpString1=0x432ea0, lpString2="779236190", iMaxLength=1024 | out: lpString1="779236190") returned="779236190" [0076.010] lstrlenW (lpString="779236190") returned 9 [0076.010] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="2E72335E") returned 8 [0076.010] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.010] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.010] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.011] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.011] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.011] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.011] lstrlenW (lpString="0") returned 1 [0076.011] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.011] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.011] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.011] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.011] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.011] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=".") returned 1 [0076.011] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.011] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.011] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.011] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.012] lstrcmpiW (lpString1=".", lpString2="^") returned -1 [0076.012] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.012] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.012] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.012] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.012] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.012] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.012] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.012] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.012] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i" [0076.012] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i") returned 52 [0076.012] lstrcpynW (in: lpString1=0x432f08, lpString2=".", iMaxLength=1024 | out: lpString1=".") returned="." [0076.012] lstrlenW (lpString=".") returned 1 [0076.013] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i." [0076.013] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.") returned 53 [0076.013] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i." [0076.013] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.013] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.013] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.013] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.013] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.013] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.013] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.013] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.013] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.013] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.014] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.014] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.014] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.014] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.014] lstrlenW (lpString="C:\\Windows") returned 10 [0076.014] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.014] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.014] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.014] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.014] lstrlenW (lpString="524386") returned 6 [0076.014] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.014] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.015] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.015] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.015] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.015] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.015] lstrlenW (lpString="0") returned 1 [0076.015] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0076.015] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.015] lstrlenW (lpString="2") returned 1 [0076.015] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.015] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.015] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.015] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.015] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.015] lstrlenW (lpString="2") returned 1 [0076.015] lstrcpynW (in: lpString1=0x432ea0, lpString2="2E72335E", iMaxLength=1024 | out: lpString1="2E72335E") returned="2E72335E" [0076.015] lstrlenW (lpString="2E72335E") returned 8 [0076.015] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2E72335E", iMaxLength=1024 | out: lpString1="2E72335E") returned="2E72335E" [0076.015] lstrlenW (lpString="2E72335E") returned 8 [0076.015] lstrcpynW (in: lpString1=0x46b000, lpString2="72335E", iMaxLength=1024 | out: lpString1="72335E") returned="72335E" [0076.015] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.015] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.015] lstrlenW (lpString="") returned 0 [0076.016] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.016] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.016] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.016] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.016] lstrcpynW (in: lpString1=0x432ea4, lpString2="72", iMaxLength=1024 | out: lpString1="72") returned="72" [0076.016] lstrlenW (lpString="72") returned 2 [0076.016] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="r") returned 1 [0076.016] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.016] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.016] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.016] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.016] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.016] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.016] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.016] lstrcpynW (in: lpString1=0x432ea0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0076.016] lstrlenW (lpString="r") returned 1 [0076.016] lstrcpynW (in: lpString1=0x40b5f0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0076.016] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.016] lstrcmpiW (lpString1="r", lpString2="^") returned 1 [0076.017] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.017] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.017] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.017] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.017] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.017] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.017] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.017] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.017] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i." [0076.017] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.") returned 53 [0076.017] lstrcpynW (in: lpString1=0x432f0a, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0076.017] lstrlenW (lpString="r") returned 1 [0076.017] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.r", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.r") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.r" [0076.017] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.r") returned 54 [0076.018] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.r", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.r") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.r" [0076.018] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.018] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.018] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.018] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.018] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.018] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.018] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.018] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.018] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.018] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.019] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.019] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.019] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.019] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.019] lstrlenW (lpString="C:\\Windows") returned 10 [0076.019] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.019] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.019] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.019] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.019] lstrlenW (lpString="524386") returned 6 [0076.019] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.019] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.019] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.020] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.020] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.020] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.020] lstrlenW (lpString="2") returned 1 [0076.020] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0076.020] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.020] lstrlenW (lpString="4") returned 1 [0076.020] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.020] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.020] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.020] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.020] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.020] lstrlenW (lpString="4") returned 1 [0076.020] lstrcpynW (in: lpString1=0x432ea0, lpString2="2E72335E", iMaxLength=1024 | out: lpString1="2E72335E") returned="2E72335E" [0076.020] lstrlenW (lpString="2E72335E") returned 8 [0076.020] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2E72335E", iMaxLength=1024 | out: lpString1="2E72335E") returned="2E72335E" [0076.020] lstrlenW (lpString="2E72335E") returned 8 [0076.020] lstrcpynW (in: lpString1=0x46b000, lpString2="335E", iMaxLength=1024 | out: lpString1="335E") returned="335E" [0076.020] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.020] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.020] lstrlenW (lpString="") returned 0 [0076.020] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.020] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.020] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.020] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.021] lstrcpynW (in: lpString1=0x432ea4, lpString2="33", iMaxLength=1024 | out: lpString1="33") returned="33" [0076.021] lstrlenW (lpString="33") returned 2 [0076.021] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="3") returned 1 [0076.021] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.021] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.021] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.021] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.021] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.021] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.021] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.021] lstrcpynW (in: lpString1=0x432ea0, lpString2="3", iMaxLength=1024 | out: lpString1="3") returned="3" [0076.021] lstrlenW (lpString="3") returned 1 [0076.021] lstrcpynW (in: lpString1=0x40b5f0, lpString2="3", iMaxLength=1024 | out: lpString1="3") returned="3" [0076.021] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.021] lstrcmpiW (lpString1="3", lpString2="^") returned 1 [0076.021] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.021] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.022] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.022] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.022] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.022] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.022] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.022] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.022] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.r", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.r") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.r" [0076.022] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.r") returned 54 [0076.022] lstrcpynW (in: lpString1=0x432f0c, lpString2="3", iMaxLength=1024 | out: lpString1="3") returned="3" [0076.022] lstrlenW (lpString="3") returned 1 [0076.022] lstrcpynW (in: lpString1=0x40a5f0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.r3", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.r3") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.r3" [0076.022] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.r3") returned 55 [0076.022] lstrcpynW (in: lpString1=0x46c000, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.r3", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.r3") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.r3" [0076.022] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.022] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.023] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.023] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.023] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.023] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.023] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.023] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.023] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.023] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.024] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.024] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.024] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.024] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.024] lstrlenW (lpString="C:\\Windows") returned 10 [0076.024] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.024] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.024] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.024] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.024] lstrlenW (lpString="524386") returned 6 [0076.024] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.024] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.024] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.024] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.024] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.025] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.025] lstrlenW (lpString="4") returned 1 [0076.025] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0076.025] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.025] lstrlenW (lpString="6") returned 1 [0076.025] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.025] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.025] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.025] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.025] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.025] lstrlenW (lpString="6") returned 1 [0076.025] lstrcpynW (in: lpString1=0x432ea0, lpString2="2E72335E", iMaxLength=1024 | out: lpString1="2E72335E") returned="2E72335E" [0076.025] lstrlenW (lpString="2E72335E") returned 8 [0076.025] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2E72335E", iMaxLength=1024 | out: lpString1="2E72335E") returned="2E72335E" [0076.025] lstrlenW (lpString="2E72335E") returned 8 [0076.025] lstrcpynW (in: lpString1=0x46b000, lpString2="5E", iMaxLength=1024 | out: lpString1="5E") returned="5E" [0076.025] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.025] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.025] lstrlenW (lpString="") returned 0 [0076.025] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.025] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.025] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.025] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.025] lstrcpynW (in: lpString1=0x432ea4, lpString2="5E", iMaxLength=1024 | out: lpString1="5E") returned="5E" [0076.025] lstrlenW (lpString="5E") returned 2 [0076.026] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="^") returned 1 [0076.026] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.026] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.026] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.026] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.026] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.026] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.026] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.026] lstrcpynW (in: lpString1=0x432ea0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.026] lstrlenW (lpString="^") returned 1 [0076.026] lstrcpynW (in: lpString1=0x40b5f0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.026] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.026] lstrcmpiW (lpString1="^", lpString2="^") returned 0 [0076.026] lstrcpynW (in: lpString1=0x432ea0, lpString2="484", iMaxLength=1024 | out: lpString1="484") returned="484" [0076.026] lstrlenW (lpString="484") returned 3 [0076.026] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.026] lstrlenW (lpString="6") returned 1 [0076.026] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="490") returned 3 [0076.026] lstrcpynW (in: lpString1=0x432ea0, lpString2="490", iMaxLength=1024 | out: lpString1="490") returned="490" [0076.026] lstrlenW (lpString="490") returned 3 [0076.027] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="492") returned 3 [0076.027] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0076.027] lstrcpynW (in: lpString1=0x40b5f0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0076.027] lstrcpynW (in: lpString1=0x40bdf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.027] lstrcmpiW (lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", lpString2="") returned 1 [0076.027] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0076.027] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" [0076.027] lstrcpynW (in: lpString1=0x40a5f0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" [0076.027] CreateFileW (lpFileName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\nszc5ad.tmp\\system.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0xffffffff [0076.027] lstrcpynW (in: lpString1=0x42c248, lpString2="Skipped: ", iMaxLength=1024 | out: lpString1="Skipped: ") returned="Skipped: " [0076.027] lstrlenW (lpString="Skipped: ") returned 9 [0076.027] lstrlenW (lpString="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned 59 [0076.027] lstrcatW (in: lpString1="Skipped: ", lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" | out: lpString1="Skipped: C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned="Skipped: C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" [0076.028] lstrcpynW (in: lpString1=0x432ea0, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.r3", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.r3") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.r3" [0076.028] lstrlenW (lpString="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.r3") returned 55 [0076.028] lstrcpynW (in: lpString1=0x33e65c, lpString2="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.r3", iMaxLength=1024 | out: lpString1="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.r3") returned="KERNEL32::ReadFile(ir5, i r1, i 0x100000,*i 0, i 0)i.r3" [0076.028] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0076.028] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" [0076.028] lstrcpynW (in: lpString1=0x40a5f0, lpString2="Call", iMaxLength=1024 | out: lpString1="Call") returned="Call" [0076.028] GetModuleHandleW (lpModuleName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned 0x74ad0000 [0076.028] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Call", cchWideChar=-1, lpMultiByteStr=0x2dff86c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Call", lpUsedDefaultChar=0x0) returned 5 [0076.028] GetProcAddress (hModule=0x74ad0000, lpProcName="Call") returned 0x74ad1817 [0076.028] lstrcpyW (in: lpString1=0x33f670, lpString2="KERNEL32" | out: lpString1="KERNEL32") returned="KERNEL32" [0076.029] lstrcpyW (in: lpString1=0x33fe80, lpString2="KERNEL32" | out: lpString1="KERNEL32") returned="KERNEL32" [0076.029] lstrcpyW (in: lpString1=0x340680, lpString2="ReadFile" | out: lpString1="ReadFile") returned="ReadFile" [0076.030] GetModuleHandleW (lpModuleName="KERNEL32") returned 0x75620000 [0076.030] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ReadFile", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0076.030] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ReadFile", cchWideChar=-1, lpMultiByteStr=0x339128, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ReadFile", lpUsedDefaultChar=0x0) returned 9 [0076.030] GetProcAddress (hModule=0x75620000, lpProcName="ReadFile") returned 0x75633e83 [0076.030] lstrcpynW (in: lpString1=0x343340, lpString2="464", iMaxLength=1024 | out: lpString1="464") returned="464" [0076.030] lstrcpynW (in: lpString1=0x343340, lpString2="48234496", iMaxLength=1024 | out: lpString1="48234496") returned="48234496" [0076.031] lstrcpynW (in: lpString1=0x33e658, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.032] ReadFile (in: hFile=0x1d0, lpBuffer=0x2e00000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x310f60, lpOverlapped=0x0 | out: lpBuffer=0x2e00000*, lpNumberOfBytesRead=0x310f60*=0x14bd6, lpOverlapped=0x0) returned 1 [0076.066] wsprintfW (in: param_1=0x33e658, param_2="%d" | out: param_1="0") returned 1 [0076.066] wsprintfW (in: param_1=0x33e658, param_2="%d" | out: param_1="84950") returned 5 [0076.066] wsprintfW (in: param_1=0x33e658, param_2="%d" | out: param_1="1048576") returned 7 [0076.066] wsprintfW (in: param_1=0x33e658, param_2="%d" | out: param_1="48234496") returned 8 [0076.066] wsprintfW (in: param_1=0x33e658, param_2="%d" | out: param_1="464") returned 3 [0076.066] wsprintfW (in: param_1=0x33e658, param_2="%d" | out: param_1="1") returned 1 [0076.066] lstrcpyW (in: lpString1=0x437800, lpString2="1" | out: lpString1="1") returned="1" [0076.067] lstrcpynW (in: lpString1=0x40a5f0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.067] lstrlenW (lpString="") returned 0 [0076.067] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.067] lstrlenW (lpString="") returned 0 [0076.067] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.067] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.067] lstrcpynW (in: lpString1=0x432ea0, lpString2="492", iMaxLength=1024 | out: lpString1="492") returned="492" [0076.067] lstrlenW (lpString="492") returned 3 [0076.067] lstrcpynW (in: lpString1=0x432ea0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0076.067] lstrcpynW (in: lpString1=0x40a5f0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0076.067] lstrlenW (lpString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returned 1023 [0076.067] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0076.067] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0076.068] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0076.068] RegCloseKey (hKey=0x1c0) returned 0x0 [0076.068] lstrcpynW (in: lpString1=0x432ea4, lpString2="80FB10EE", iMaxLength=1024 | out: lpString1="80FB10EE") returned="80FB10EE" [0076.068] lstrlenW (lpString="80FB10EE") returned 8 [0076.068] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1970496882") returned 10 [0076.068] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0076.068] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0076.068] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0076.069] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0076.069] RegCloseKey (hKey=0x1c0) returned 0x0 [0076.069] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0076.069] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0076.070] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0076.070] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0076.070] lstrcpynW (in: lpString1=0x432ea0, lpString2="1970496882", iMaxLength=1024 | out: lpString1="1970496882") returned="1970496882" [0076.070] lstrlenW (lpString="1970496882") returned 10 [0076.070] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="75736572") returned 8 [0076.071] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.071] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.071] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.071] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.071] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.071] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.071] lstrlenW (lpString="0") returned 1 [0076.071] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.071] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.071] lstrlenW (lpString="0") returned 1 [0076.071] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.072] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.072] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.072] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.072] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.072] lstrlenW (lpString="0") returned 1 [0076.072] lstrcpynW (in: lpString1=0x432ea0, lpString2="75736572", iMaxLength=1024 | out: lpString1="75736572") returned="75736572" [0076.072] lstrlenW (lpString="75736572") returned 8 [0076.072] lstrcpynW (in: lpString1=0x40a5f0, lpString2="75736572", iMaxLength=1024 | out: lpString1="75736572") returned="75736572" [0076.072] lstrlenW (lpString="75736572") returned 8 [0076.072] lstrcpynW (in: lpString1=0x46b000, lpString2="75736572", iMaxLength=1024 | out: lpString1="75736572") returned="75736572" [0076.072] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.072] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.072] lstrlenW (lpString="") returned 0 [0076.072] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.072] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.072] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.072] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.072] lstrcpynW (in: lpString1=0x432ea4, lpString2="75", iMaxLength=1024 | out: lpString1="75") returned="75" [0076.072] lstrlenW (lpString="75") returned 2 [0076.072] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="u") returned 1 [0076.072] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.072] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.072] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.073] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.073] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.073] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.073] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.073] lstrcpynW (in: lpString1=0x432ea0, lpString2="u", iMaxLength=1024 | out: lpString1="u") returned="u" [0076.073] lstrlenW (lpString="u") returned 1 [0076.073] lstrcpynW (in: lpString1=0x40b5f0, lpString2="u", iMaxLength=1024 | out: lpString1="u") returned="u" [0076.073] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.073] lstrcmpiW (lpString1="u", lpString2="^") returned 1 [0076.073] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.073] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.073] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.073] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.074] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.074] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.074] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.074] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.074] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.074] lstrlenW (lpString="") returned 0 [0076.074] lstrcpynW (in: lpString1=0x432ea0, lpString2="u", iMaxLength=1024 | out: lpString1="u") returned="u" [0076.074] lstrlenW (lpString="u") returned 1 [0076.074] lstrcpynW (in: lpString1=0x40a5f0, lpString2="u", iMaxLength=1024 | out: lpString1="u") returned="u" [0076.074] lstrlenW (lpString="u") returned 1 [0076.074] lstrcpynW (in: lpString1=0x46c000, lpString2="u", iMaxLength=1024 | out: lpString1="u") returned="u" [0076.074] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.074] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.074] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.074] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.075] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.075] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.075] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.075] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.075] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.075] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.075] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.075] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.075] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.076] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.076] lstrlenW (lpString="C:\\Windows") returned 10 [0076.076] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.076] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.076] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.076] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.076] lstrlenW (lpString="524386") returned 6 [0076.076] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.076] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.076] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.076] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.076] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.076] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.076] lstrlenW (lpString="0") returned 1 [0076.076] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0076.076] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.077] lstrlenW (lpString="2") returned 1 [0076.077] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.077] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.077] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.077] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.077] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.077] lstrlenW (lpString="2") returned 1 [0076.077] lstrcpynW (in: lpString1=0x432ea0, lpString2="75736572", iMaxLength=1024 | out: lpString1="75736572") returned="75736572" [0076.077] lstrlenW (lpString="75736572") returned 8 [0076.077] lstrcpynW (in: lpString1=0x40a5f0, lpString2="75736572", iMaxLength=1024 | out: lpString1="75736572") returned="75736572" [0076.077] lstrlenW (lpString="75736572") returned 8 [0076.077] lstrcpynW (in: lpString1=0x46b000, lpString2="736572", iMaxLength=1024 | out: lpString1="736572") returned="736572" [0076.077] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.077] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.077] lstrlenW (lpString="") returned 0 [0076.077] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.077] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.077] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.077] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.077] lstrcpynW (in: lpString1=0x432ea4, lpString2="73", iMaxLength=1024 | out: lpString1="73") returned="73" [0076.077] lstrlenW (lpString="73") returned 2 [0076.077] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="s") returned 1 [0076.077] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.077] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.078] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.078] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.078] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.078] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.078] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.078] lstrcpynW (in: lpString1=0x432ea0, lpString2="s", iMaxLength=1024 | out: lpString1="s") returned="s" [0076.078] lstrlenW (lpString="s") returned 1 [0076.078] lstrcpynW (in: lpString1=0x40b5f0, lpString2="s", iMaxLength=1024 | out: lpString1="s") returned="s" [0076.078] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.078] lstrcmpiW (lpString1="s", lpString2="^") returned 1 [0076.078] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.078] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.078] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.078] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.079] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.079] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.079] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.079] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.079] lstrcpynW (in: lpString1=0x432ea0, lpString2="u", iMaxLength=1024 | out: lpString1="u") returned="u" [0076.079] lstrlenW (lpString="u") returned 1 [0076.079] lstrcpynW (in: lpString1=0x432ea2, lpString2="s", iMaxLength=1024 | out: lpString1="s") returned="s" [0076.079] lstrlenW (lpString="s") returned 1 [0076.079] lstrcpynW (in: lpString1=0x40a5f0, lpString2="us", iMaxLength=1024 | out: lpString1="us") returned="us" [0076.079] lstrlenW (lpString="us") returned 2 [0076.079] lstrcpynW (in: lpString1=0x46c000, lpString2="us", iMaxLength=1024 | out: lpString1="us") returned="us" [0076.079] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.079] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.079] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.079] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.080] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.080] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.080] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.080] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.080] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.080] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.080] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.080] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.080] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.081] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.081] lstrlenW (lpString="C:\\Windows") returned 10 [0076.081] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.081] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.081] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.081] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.081] lstrlenW (lpString="524386") returned 6 [0076.081] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.081] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.081] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.081] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.081] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.081] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.081] lstrlenW (lpString="2") returned 1 [0076.081] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0076.081] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.081] lstrlenW (lpString="4") returned 1 [0076.081] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.081] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.082] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.082] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.082] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.082] lstrlenW (lpString="4") returned 1 [0076.082] lstrcpynW (in: lpString1=0x432ea0, lpString2="75736572", iMaxLength=1024 | out: lpString1="75736572") returned="75736572" [0076.082] lstrlenW (lpString="75736572") returned 8 [0076.082] lstrcpynW (in: lpString1=0x40a5f0, lpString2="75736572", iMaxLength=1024 | out: lpString1="75736572") returned="75736572" [0076.082] lstrlenW (lpString="75736572") returned 8 [0076.082] lstrcpynW (in: lpString1=0x46b000, lpString2="6572", iMaxLength=1024 | out: lpString1="6572") returned="6572" [0076.082] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.082] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.082] lstrlenW (lpString="") returned 0 [0076.082] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.082] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.082] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.082] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.082] lstrcpynW (in: lpString1=0x432ea4, lpString2="65", iMaxLength=1024 | out: lpString1="65") returned="65" [0076.082] lstrlenW (lpString="65") returned 2 [0076.082] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="e") returned 1 [0076.082] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.082] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.082] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.083] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.083] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.083] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.083] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.083] lstrcpynW (in: lpString1=0x432ea0, lpString2="e", iMaxLength=1024 | out: lpString1="e") returned="e" [0076.083] lstrlenW (lpString="e") returned 1 [0076.083] lstrcpynW (in: lpString1=0x40b5f0, lpString2="e", iMaxLength=1024 | out: lpString1="e") returned="e" [0076.083] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.083] lstrcmpiW (lpString1="e", lpString2="^") returned 1 [0076.083] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.083] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.083] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.083] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.083] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.083] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.084] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.084] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.084] lstrcpynW (in: lpString1=0x432ea0, lpString2="us", iMaxLength=1024 | out: lpString1="us") returned="us" [0076.084] lstrlenW (lpString="us") returned 2 [0076.084] lstrcpynW (in: lpString1=0x432ea4, lpString2="e", iMaxLength=1024 | out: lpString1="e") returned="e" [0076.084] lstrlenW (lpString="e") returned 1 [0076.084] lstrcpynW (in: lpString1=0x40a5f0, lpString2="use", iMaxLength=1024 | out: lpString1="use") returned="use" [0076.084] lstrlenW (lpString="use") returned 3 [0076.084] lstrcpynW (in: lpString1=0x46c000, lpString2="use", iMaxLength=1024 | out: lpString1="use") returned="use" [0076.084] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.084] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.084] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.084] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.084] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.084] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.085] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.085] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.085] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.085] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.085] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.085] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.085] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.086] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.086] lstrlenW (lpString="C:\\Windows") returned 10 [0076.086] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.086] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.086] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.086] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.086] lstrlenW (lpString="524386") returned 6 [0076.086] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.086] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.086] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.086] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.086] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.086] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.086] lstrlenW (lpString="4") returned 1 [0076.086] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0076.086] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.086] lstrlenW (lpString="6") returned 1 [0076.086] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.087] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.087] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.087] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.087] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.087] lstrlenW (lpString="6") returned 1 [0076.087] lstrcpynW (in: lpString1=0x432ea0, lpString2="75736572", iMaxLength=1024 | out: lpString1="75736572") returned="75736572" [0076.087] lstrlenW (lpString="75736572") returned 8 [0076.087] lstrcpynW (in: lpString1=0x40a5f0, lpString2="75736572", iMaxLength=1024 | out: lpString1="75736572") returned="75736572" [0076.087] lstrlenW (lpString="75736572") returned 8 [0076.087] lstrcpynW (in: lpString1=0x46b000, lpString2="72", iMaxLength=1024 | out: lpString1="72") returned="72" [0076.087] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.087] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.087] lstrlenW (lpString="") returned 0 [0076.087] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.087] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.087] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.087] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.087] lstrcpynW (in: lpString1=0x432ea4, lpString2="72", iMaxLength=1024 | out: lpString1="72") returned="72" [0076.087] lstrlenW (lpString="72") returned 2 [0076.087] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="r") returned 1 [0076.087] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.087] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.087] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.088] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.088] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.088] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.088] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.088] lstrcpynW (in: lpString1=0x432ea0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0076.088] lstrlenW (lpString="r") returned 1 [0076.088] lstrcpynW (in: lpString1=0x40b5f0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0076.088] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.088] lstrcmpiW (lpString1="r", lpString2="^") returned 1 [0076.088] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.088] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.088] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.088] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.088] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.088] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.089] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.089] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.089] lstrcpynW (in: lpString1=0x432ea0, lpString2="use", iMaxLength=1024 | out: lpString1="use") returned="use" [0076.089] lstrlenW (lpString="use") returned 3 [0076.089] lstrcpynW (in: lpString1=0x432ea6, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0076.089] lstrlenW (lpString="r") returned 1 [0076.089] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user", iMaxLength=1024 | out: lpString1="user") returned="user" [0076.089] lstrlenW (lpString="user") returned 4 [0076.089] lstrcpynW (in: lpString1=0x46c000, lpString2="user", iMaxLength=1024 | out: lpString1="user") returned="user" [0076.089] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.089] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.089] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.089] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.089] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.089] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.089] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.089] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.090] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.090] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.090] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.090] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.090] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.090] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.090] lstrlenW (lpString="C:\\Windows") returned 10 [0076.090] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.090] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.090] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.090] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.090] lstrlenW (lpString="524386") returned 6 [0076.091] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.091] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.091] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.091] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.091] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.091] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.091] lstrlenW (lpString="6") returned 1 [0076.091] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0076.091] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0076.091] lstrlenW (lpString="8") returned 1 [0076.091] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0076.091] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0076.091] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0076.091] lstrlenW (lpString="Execute: ") returned 9 [0076.091] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0076.091] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0076.091] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0076.092] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x49 [0076.092] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x49 [0076.092] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x49, lParam=0x0) returned 0x1 [0076.093] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0076.093] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0076.093] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0076.094] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0076.094] lstrcpynW (in: lpString1=0x432ea0, lpString2="492", iMaxLength=1024 | out: lpString1="492") returned="492" [0076.094] lstrlenW (lpString="492") returned 3 [0076.094] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="500") returned 3 [0076.094] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.094] lstrlenW (lpString="") returned 0 [0076.094] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.094] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.094] lstrcpynW (in: lpString1=0x432ea0, lpString2="500", iMaxLength=1024 | out: lpString1="500") returned="500" [0076.094] lstrlenW (lpString="500") returned 3 [0076.094] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0076.094] lstrlenW (lpString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returned 1023 [0076.094] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrlenW (lpString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returned 1023 [0076.094] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0076.094] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0076.094] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0076.095] RegCloseKey (hKey=0x1c0) returned 0x0 [0076.095] lstrcpynW (in: lpString1=0x432ea4, lpString2="C6BA4FA6", iMaxLength=1024 | out: lpString1="C6BA4FA6") returned="C6BA4FA6" [0076.095] lstrlenW (lpString="C6BA4FA6") returned 8 [0076.095] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="858929722") returned 9 [0076.095] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0076.095] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0076.095] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0076.095] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0076.095] RegCloseKey (hKey=0x1c0) returned 0x0 [0076.095] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0076.095] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0076.095] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0076.096] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0076.096] lstrcpynW (in: lpString1=0x432ea0, lpString2="858929722", iMaxLength=1024 | out: lpString1="858929722") returned="858929722" [0076.096] lstrlenW (lpString="858929722") returned 9 [0076.096] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="33323A3A") returned 8 [0076.096] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.096] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.096] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.096] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.096] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.096] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.096] lstrlenW (lpString="0") returned 1 [0076.096] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.096] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.096] lstrlenW (lpString="0") returned 1 [0076.096] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.096] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.096] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.097] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.097] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.097] lstrlenW (lpString="0") returned 1 [0076.097] lstrcpynW (in: lpString1=0x432ea0, lpString2="33323A3A", iMaxLength=1024 | out: lpString1="33323A3A") returned="33323A3A" [0076.097] lstrlenW (lpString="33323A3A") returned 8 [0076.097] lstrcpynW (in: lpString1=0x40a5f0, lpString2="33323A3A", iMaxLength=1024 | out: lpString1="33323A3A") returned="33323A3A" [0076.097] lstrlenW (lpString="33323A3A") returned 8 [0076.097] lstrcpynW (in: lpString1=0x46b000, lpString2="33323A3A", iMaxLength=1024 | out: lpString1="33323A3A") returned="33323A3A" [0076.097] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.097] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.097] lstrlenW (lpString="") returned 0 [0076.097] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.097] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.097] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.097] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.097] lstrcpynW (in: lpString1=0x432ea4, lpString2="33", iMaxLength=1024 | out: lpString1="33") returned="33" [0076.097] lstrlenW (lpString="33") returned 2 [0076.097] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="3") returned 1 [0076.097] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.097] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.097] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.098] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.098] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.098] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.098] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.098] lstrcpynW (in: lpString1=0x432ea0, lpString2="3", iMaxLength=1024 | out: lpString1="3") returned="3" [0076.098] lstrlenW (lpString="3") returned 1 [0076.098] lstrcpynW (in: lpString1=0x40b5f0, lpString2="3", iMaxLength=1024 | out: lpString1="3") returned="3" [0076.098] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.098] lstrcmpiW (lpString1="3", lpString2="^") returned 1 [0076.098] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.098] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.098] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.098] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.098] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.098] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.099] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.099] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.099] lstrcpynW (in: lpString1=0x432ea0, lpString2="user", iMaxLength=1024 | out: lpString1="user") returned="user" [0076.099] lstrlenW (lpString="user") returned 4 [0076.099] lstrcpynW (in: lpString1=0x432ea8, lpString2="3", iMaxLength=1024 | out: lpString1="3") returned="3" [0076.099] lstrlenW (lpString="3") returned 1 [0076.099] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user3", iMaxLength=1024 | out: lpString1="user3") returned="user3" [0076.099] lstrlenW (lpString="user3") returned 5 [0076.099] lstrcpynW (in: lpString1=0x46c000, lpString2="user3", iMaxLength=1024 | out: lpString1="user3") returned="user3" [0076.099] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.099] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.099] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.099] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.099] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.100] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.100] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.100] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.100] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.100] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.100] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.100] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.100] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.100] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.100] lstrlenW (lpString="C:\\Windows") returned 10 [0076.101] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.101] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.101] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.101] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.101] lstrlenW (lpString="524386") returned 6 [0076.101] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.101] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.101] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.101] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.101] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.101] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.101] lstrlenW (lpString="0") returned 1 [0076.101] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0076.101] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.101] lstrlenW (lpString="2") returned 1 [0076.102] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.102] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.102] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.102] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.102] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.102] lstrlenW (lpString="2") returned 1 [0076.102] lstrcpynW (in: lpString1=0x432ea0, lpString2="33323A3A", iMaxLength=1024 | out: lpString1="33323A3A") returned="33323A3A" [0076.102] lstrlenW (lpString="33323A3A") returned 8 [0076.102] lstrcpynW (in: lpString1=0x40a5f0, lpString2="33323A3A", iMaxLength=1024 | out: lpString1="33323A3A") returned="33323A3A" [0076.102] lstrlenW (lpString="33323A3A") returned 8 [0076.102] lstrcpynW (in: lpString1=0x46b000, lpString2="323A3A", iMaxLength=1024 | out: lpString1="323A3A") returned="323A3A" [0076.102] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.102] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.102] lstrlenW (lpString="") returned 0 [0076.102] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.102] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.102] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.102] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.102] lstrcpynW (in: lpString1=0x432ea4, lpString2="32", iMaxLength=1024 | out: lpString1="32") returned="32" [0076.102] lstrlenW (lpString="32") returned 2 [0076.102] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="2") returned 1 [0076.102] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.102] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.102] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.103] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.103] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.103] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.103] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.103] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.103] lstrlenW (lpString="2") returned 1 [0076.103] lstrcpynW (in: lpString1=0x40b5f0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.103] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.103] lstrcmpiW (lpString1="2", lpString2="^") returned 1 [0076.103] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.103] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.103] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.103] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.103] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.104] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.104] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.104] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.104] lstrcpynW (in: lpString1=0x432ea0, lpString2="user3", iMaxLength=1024 | out: lpString1="user3") returned="user3" [0076.104] lstrlenW (lpString="user3") returned 5 [0076.104] lstrcpynW (in: lpString1=0x432eaa, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.104] lstrlenW (lpString="2") returned 1 [0076.104] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32", iMaxLength=1024 | out: lpString1="user32") returned="user32" [0076.104] lstrlenW (lpString="user32") returned 6 [0076.104] lstrcpynW (in: lpString1=0x46c000, lpString2="user32", iMaxLength=1024 | out: lpString1="user32") returned="user32" [0076.104] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.104] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.104] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.104] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.104] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.105] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.105] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.105] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.105] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.105] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.105] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.105] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.105] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.105] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.106] lstrlenW (lpString="C:\\Windows") returned 10 [0076.106] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.106] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.106] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.106] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.106] lstrlenW (lpString="524386") returned 6 [0076.106] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.106] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.106] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.106] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.106] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.106] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.106] lstrlenW (lpString="2") returned 1 [0076.106] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0076.106] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.106] lstrlenW (lpString="4") returned 1 [0076.106] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.106] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.106] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.106] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.107] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.107] lstrlenW (lpString="4") returned 1 [0076.107] lstrcpynW (in: lpString1=0x432ea0, lpString2="33323A3A", iMaxLength=1024 | out: lpString1="33323A3A") returned="33323A3A" [0076.107] lstrlenW (lpString="33323A3A") returned 8 [0076.107] lstrcpynW (in: lpString1=0x40a5f0, lpString2="33323A3A", iMaxLength=1024 | out: lpString1="33323A3A") returned="33323A3A" [0076.107] lstrlenW (lpString="33323A3A") returned 8 [0076.107] lstrcpynW (in: lpString1=0x46b000, lpString2="3A3A", iMaxLength=1024 | out: lpString1="3A3A") returned="3A3A" [0076.107] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.107] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.107] lstrlenW (lpString="") returned 0 [0076.107] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.107] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.107] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.107] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.107] lstrcpynW (in: lpString1=0x432ea4, lpString2="3A", iMaxLength=1024 | out: lpString1="3A") returned="3A" [0076.107] lstrlenW (lpString="3A") returned 2 [0076.107] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=":") returned 1 [0076.107] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.107] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.107] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.108] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.108] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.108] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.108] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.108] lstrcpynW (in: lpString1=0x432ea0, lpString2=":", iMaxLength=1024 | out: lpString1=":") returned=":" [0076.108] lstrlenW (lpString=":") returned 1 [0076.108] lstrcpynW (in: lpString1=0x40b5f0, lpString2=":", iMaxLength=1024 | out: lpString1=":") returned=":" [0076.108] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.108] lstrcmpiW (lpString1=":", lpString2="^") returned -1 [0076.108] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.108] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.108] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.108] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.108] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.108] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.109] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.109] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.109] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32", iMaxLength=1024 | out: lpString1="user32") returned="user32" [0076.109] lstrlenW (lpString="user32") returned 6 [0076.109] lstrcpynW (in: lpString1=0x432eac, lpString2=":", iMaxLength=1024 | out: lpString1=":") returned=":" [0076.109] lstrlenW (lpString=":") returned 1 [0076.109] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32:", iMaxLength=1024 | out: lpString1="user32:") returned="user32:" [0076.109] lstrlenW (lpString="user32:") returned 7 [0076.109] lstrcpynW (in: lpString1=0x46c000, lpString2="user32:", iMaxLength=1024 | out: lpString1="user32:") returned="user32:" [0076.109] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.109] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.109] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.109] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.109] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.109] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.110] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.110] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.110] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.110] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.110] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.110] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.110] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.110] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.110] lstrlenW (lpString="C:\\Windows") returned 10 [0076.110] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.111] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.111] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.111] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.111] lstrlenW (lpString="524386") returned 6 [0076.111] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.111] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.111] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.111] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.111] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.111] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.111] lstrlenW (lpString="4") returned 1 [0076.111] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0076.111] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.111] lstrlenW (lpString="6") returned 1 [0076.111] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.111] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.111] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.111] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.111] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.111] lstrlenW (lpString="6") returned 1 [0076.112] lstrcpynW (in: lpString1=0x432ea0, lpString2="33323A3A", iMaxLength=1024 | out: lpString1="33323A3A") returned="33323A3A" [0076.112] lstrlenW (lpString="33323A3A") returned 8 [0076.112] lstrcpynW (in: lpString1=0x40a5f0, lpString2="33323A3A", iMaxLength=1024 | out: lpString1="33323A3A") returned="33323A3A" [0076.112] lstrlenW (lpString="33323A3A") returned 8 [0076.112] lstrcpynW (in: lpString1=0x46b000, lpString2="3A", iMaxLength=1024 | out: lpString1="3A") returned="3A" [0076.112] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.112] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.112] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.112] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=":") returned 1 [0076.112] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.112] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.112] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.112] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.112] lstrcmpiW (lpString1=":", lpString2="^") returned -1 [0076.112] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.112] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.113] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.113] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.113] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.113] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.113] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.113] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.113] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32:", iMaxLength=1024 | out: lpString1="user32:") returned="user32:" [0076.113] lstrlenW (lpString="user32:") returned 7 [0076.113] lstrcpynW (in: lpString1=0x432eae, lpString2=":", iMaxLength=1024 | out: lpString1=":") returned=":" [0076.113] lstrlenW (lpString=":") returned 1 [0076.113] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::", iMaxLength=1024 | out: lpString1="user32::") returned="user32::" [0076.113] lstrlenW (lpString="user32::") returned 8 [0076.113] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::", iMaxLength=1024 | out: lpString1="user32::") returned="user32::" [0076.113] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.113] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.114] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.114] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.114] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.114] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.114] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.114] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.114] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.114] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.114] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.114] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.115] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.115] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.115] lstrlenW (lpString="C:\\Windows") returned 10 [0076.115] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.115] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.115] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.115] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.115] lstrlenW (lpString="524386") returned 6 [0076.115] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.115] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.115] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.115] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.115] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.115] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.115] lstrlenW (lpString="6") returned 1 [0076.116] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0076.116] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0076.116] lstrlenW (lpString="8") returned 1 [0076.116] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0076.116] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0076.116] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0076.116] lstrlenW (lpString="Execute: ") returned 9 [0076.116] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0076.116] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0076.116] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0076.117] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x4a [0076.117] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x4a [0076.117] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x4a, lParam=0x0) returned 0x1 [0076.118] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0076.118] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0076.118] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0076.118] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0076.118] lstrcpynW (in: lpString1=0x432ea0, lpString2="500", iMaxLength=1024 | out: lpString1="500") returned="500" [0076.118] lstrlenW (lpString="500") returned 3 [0076.118] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="508") returned 3 [0076.118] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.118] lstrlenW (lpString="") returned 0 [0076.118] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.118] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.118] lstrcpynW (in: lpString1=0x432ea0, lpString2="508", iMaxLength=1024 | out: lpString1="508") returned="508" [0076.118] lstrlenW (lpString="508") returned 3 [0076.118] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0076.118] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0076.119] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned="B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0076.119] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0076.119] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0076.119] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0076.119] RegCloseKey (hKey=0x1c0) returned 0x0 [0076.119] lstrcpynW (in: lpString1=0x432ea4, lpString2="B6E919F0", iMaxLength=1024 | out: lpString1="B6E919F0") returned="B6E919F0" [0076.119] lstrlenW (lpString="B6E919F0") returned 8 [0076.119] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1130458220") returned 10 [0076.119] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0076.119] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0076.119] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0076.119] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0076.119] RegCloseKey (hKey=0x1c0) returned 0x0 [0076.119] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0076.120] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0076.120] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0076.120] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0076.120] lstrcpynW (in: lpString1=0x432ea0, lpString2="1130458220", iMaxLength=1024 | out: lpString1="1130458220") returned="1130458220" [0076.120] lstrlenW (lpString="1130458220") returned 10 [0076.120] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="43616C6C") returned 8 [0076.120] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.120] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.120] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.120] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.120] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.120] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.120] lstrlenW (lpString="0") returned 1 [0076.120] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.121] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.121] lstrlenW (lpString="0") returned 1 [0076.121] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.121] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.121] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.121] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.121] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.121] lstrlenW (lpString="0") returned 1 [0076.121] lstrcpynW (in: lpString1=0x432ea0, lpString2="43616C6C", iMaxLength=1024 | out: lpString1="43616C6C") returned="43616C6C" [0076.121] lstrlenW (lpString="43616C6C") returned 8 [0076.121] lstrcpynW (in: lpString1=0x40a5f0, lpString2="43616C6C", iMaxLength=1024 | out: lpString1="43616C6C") returned="43616C6C" [0076.121] lstrlenW (lpString="43616C6C") returned 8 [0076.121] lstrcpynW (in: lpString1=0x46b000, lpString2="43616C6C", iMaxLength=1024 | out: lpString1="43616C6C") returned="43616C6C" [0076.121] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.121] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.121] lstrlenW (lpString="") returned 0 [0076.121] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.121] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.121] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.121] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.121] lstrcpynW (in: lpString1=0x432ea4, lpString2="43", iMaxLength=1024 | out: lpString1="43") returned="43" [0076.121] lstrlenW (lpString="43") returned 2 [0076.122] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="C") returned 1 [0076.122] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.122] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.122] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.122] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.122] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.122] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.122] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.122] lstrcpynW (in: lpString1=0x432ea0, lpString2="C", iMaxLength=1024 | out: lpString1="C") returned="C" [0076.122] lstrlenW (lpString="C") returned 1 [0076.122] lstrcpynW (in: lpString1=0x40b5f0, lpString2="C", iMaxLength=1024 | out: lpString1="C") returned="C" [0076.122] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.122] lstrcmpiW (lpString1="C", lpString2="^") returned 1 [0076.122] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.122] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.123] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.123] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.123] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.123] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.123] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.123] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.123] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::", iMaxLength=1024 | out: lpString1="user32::") returned="user32::" [0076.123] lstrlenW (lpString="user32::") returned 8 [0076.123] lstrcpynW (in: lpString1=0x432eb0, lpString2="C", iMaxLength=1024 | out: lpString1="C") returned="C" [0076.123] lstrlenW (lpString="C") returned 1 [0076.123] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::C", iMaxLength=1024 | out: lpString1="user32::C") returned="user32::C" [0076.123] lstrlenW (lpString="user32::C") returned 9 [0076.123] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::C", iMaxLength=1024 | out: lpString1="user32::C") returned="user32::C" [0076.123] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.124] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.124] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.124] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.124] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.124] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.124] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.124] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.124] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.124] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.125] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.125] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.125] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.125] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.125] lstrlenW (lpString="C:\\Windows") returned 10 [0076.125] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.125] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.125] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.125] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.125] lstrlenW (lpString="524386") returned 6 [0076.125] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.125] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.125] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.126] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.126] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.126] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.126] lstrlenW (lpString="0") returned 1 [0076.126] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0076.126] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.126] lstrlenW (lpString="2") returned 1 [0076.126] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.126] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.126] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.126] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.126] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.126] lstrlenW (lpString="2") returned 1 [0076.126] lstrcpynW (in: lpString1=0x432ea0, lpString2="43616C6C", iMaxLength=1024 | out: lpString1="43616C6C") returned="43616C6C" [0076.126] lstrlenW (lpString="43616C6C") returned 8 [0076.126] lstrcpynW (in: lpString1=0x40a5f0, lpString2="43616C6C", iMaxLength=1024 | out: lpString1="43616C6C") returned="43616C6C" [0076.126] lstrlenW (lpString="43616C6C") returned 8 [0076.126] lstrcpynW (in: lpString1=0x46b000, lpString2="616C6C", iMaxLength=1024 | out: lpString1="616C6C") returned="616C6C" [0076.126] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.126] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.126] lstrlenW (lpString="") returned 0 [0076.126] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.127] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.127] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.127] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.127] lstrcpynW (in: lpString1=0x432ea4, lpString2="61", iMaxLength=1024 | out: lpString1="61") returned="61" [0076.127] lstrlenW (lpString="61") returned 2 [0076.127] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="a") returned 1 [0076.127] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.127] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.127] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.127] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.127] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.127] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.127] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.127] lstrcpynW (in: lpString1=0x432ea0, lpString2="a", iMaxLength=1024 | out: lpString1="a") returned="a" [0076.127] lstrlenW (lpString="a") returned 1 [0076.127] lstrcpynW (in: lpString1=0x40b5f0, lpString2="a", iMaxLength=1024 | out: lpString1="a") returned="a" [0076.127] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.127] lstrcmpiW (lpString1="a", lpString2="^") returned 1 [0076.127] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.128] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.128] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.128] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.128] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.128] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.128] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.128] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.128] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::C", iMaxLength=1024 | out: lpString1="user32::C") returned="user32::C" [0076.128] lstrlenW (lpString="user32::C") returned 9 [0076.128] lstrcpynW (in: lpString1=0x432eb2, lpString2="a", iMaxLength=1024 | out: lpString1="a") returned="a" [0076.128] lstrlenW (lpString="a") returned 1 [0076.128] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::Ca", iMaxLength=1024 | out: lpString1="user32::Ca") returned="user32::Ca" [0076.128] lstrlenW (lpString="user32::Ca") returned 10 [0076.128] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::Ca", iMaxLength=1024 | out: lpString1="user32::Ca") returned="user32::Ca" [0076.129] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.129] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.129] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.129] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.129] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.129] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.129] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.129] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.129] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.129] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.130] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.130] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.130] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.130] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.130] lstrlenW (lpString="C:\\Windows") returned 10 [0076.130] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.130] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.130] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.130] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.130] lstrlenW (lpString="524386") returned 6 [0076.130] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.130] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.130] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.130] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.130] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.131] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.131] lstrlenW (lpString="2") returned 1 [0076.131] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0076.131] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.131] lstrlenW (lpString="4") returned 1 [0076.131] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.131] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.131] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.131] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.131] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.131] lstrlenW (lpString="4") returned 1 [0076.131] lstrcpynW (in: lpString1=0x432ea0, lpString2="43616C6C", iMaxLength=1024 | out: lpString1="43616C6C") returned="43616C6C" [0076.131] lstrlenW (lpString="43616C6C") returned 8 [0076.131] lstrcpynW (in: lpString1=0x40a5f0, lpString2="43616C6C", iMaxLength=1024 | out: lpString1="43616C6C") returned="43616C6C" [0076.131] lstrlenW (lpString="43616C6C") returned 8 [0076.131] lstrcpynW (in: lpString1=0x46b000, lpString2="6C6C", iMaxLength=1024 | out: lpString1="6C6C") returned="6C6C" [0076.131] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.131] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.131] lstrlenW (lpString="") returned 0 [0076.131] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.131] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.131] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.131] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.131] lstrcpynW (in: lpString1=0x432ea4, lpString2="6C", iMaxLength=1024 | out: lpString1="6C") returned="6C" [0076.131] lstrlenW (lpString="6C") returned 2 [0076.132] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="l") returned 1 [0076.132] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.132] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.132] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.132] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.134] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.134] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.134] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.134] lstrcpynW (in: lpString1=0x432ea0, lpString2="l", iMaxLength=1024 | out: lpString1="l") returned="l" [0076.134] lstrlenW (lpString="l") returned 1 [0076.134] lstrcpynW (in: lpString1=0x40b5f0, lpString2="l", iMaxLength=1024 | out: lpString1="l") returned="l" [0076.134] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.134] lstrcmpiW (lpString1="l", lpString2="^") returned 1 [0076.134] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.134] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.134] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.134] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.134] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.134] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.135] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.135] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.135] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::Ca", iMaxLength=1024 | out: lpString1="user32::Ca") returned="user32::Ca" [0076.135] lstrlenW (lpString="user32::Ca") returned 10 [0076.135] lstrcpynW (in: lpString1=0x432eb4, lpString2="l", iMaxLength=1024 | out: lpString1="l") returned="l" [0076.135] lstrlenW (lpString="l") returned 1 [0076.135] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::Cal", iMaxLength=1024 | out: lpString1="user32::Cal") returned="user32::Cal" [0076.135] lstrlenW (lpString="user32::Cal") returned 11 [0076.135] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::Cal", iMaxLength=1024 | out: lpString1="user32::Cal") returned="user32::Cal" [0076.135] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.135] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.135] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.135] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.135] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.135] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.135] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.136] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.136] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.136] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.136] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.136] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.136] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.136] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.136] lstrlenW (lpString="C:\\Windows") returned 10 [0076.136] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.136] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.137] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.137] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.137] lstrlenW (lpString="524386") returned 6 [0076.137] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.137] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.137] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.137] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.137] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.137] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.137] lstrlenW (lpString="4") returned 1 [0076.137] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0076.137] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.137] lstrlenW (lpString="6") returned 1 [0076.137] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.137] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.137] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.137] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.137] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.137] lstrlenW (lpString="6") returned 1 [0076.138] lstrcpynW (in: lpString1=0x432ea0, lpString2="43616C6C", iMaxLength=1024 | out: lpString1="43616C6C") returned="43616C6C" [0076.138] lstrlenW (lpString="43616C6C") returned 8 [0076.138] lstrcpynW (in: lpString1=0x40a5f0, lpString2="43616C6C", iMaxLength=1024 | out: lpString1="43616C6C") returned="43616C6C" [0076.138] lstrlenW (lpString="43616C6C") returned 8 [0076.138] lstrcpynW (in: lpString1=0x46b000, lpString2="6C", iMaxLength=1024 | out: lpString1="6C") returned="6C" [0076.138] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.138] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.138] lstrlenW (lpString="") returned 0 [0076.138] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.138] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.138] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.138] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.138] lstrcpynW (in: lpString1=0x432ea4, lpString2="6C", iMaxLength=1024 | out: lpString1="6C") returned="6C" [0076.138] lstrlenW (lpString="6C") returned 2 [0076.138] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="l") returned 1 [0076.138] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.138] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.138] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.138] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.138] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.139] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.139] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.139] lstrcpynW (in: lpString1=0x432ea0, lpString2="l", iMaxLength=1024 | out: lpString1="l") returned="l" [0076.139] lstrlenW (lpString="l") returned 1 [0076.139] lstrcpynW (in: lpString1=0x40b5f0, lpString2="l", iMaxLength=1024 | out: lpString1="l") returned="l" [0076.139] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.139] lstrcmpiW (lpString1="l", lpString2="^") returned 1 [0076.139] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.139] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.139] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.139] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.139] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.139] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.140] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.140] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.140] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::Cal", iMaxLength=1024 | out: lpString1="user32::Cal") returned="user32::Cal" [0076.140] lstrlenW (lpString="user32::Cal") returned 11 [0076.140] lstrcpynW (in: lpString1=0x432eb6, lpString2="l", iMaxLength=1024 | out: lpString1="l") returned="l" [0076.140] lstrlenW (lpString="l") returned 1 [0076.140] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::Call", iMaxLength=1024 | out: lpString1="user32::Call") returned="user32::Call" [0076.140] lstrlenW (lpString="user32::Call") returned 12 [0076.140] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::Call", iMaxLength=1024 | out: lpString1="user32::Call") returned="user32::Call" [0076.140] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.140] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.140] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.140] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.140] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.140] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.140] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.141] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.141] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.141] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.141] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.141] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.141] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.141] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.141] lstrlenW (lpString="C:\\Windows") returned 10 [0076.141] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.141] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.142] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.142] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.142] lstrlenW (lpString="524386") returned 6 [0076.142] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.142] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.142] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.142] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.142] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.142] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.142] lstrlenW (lpString="6") returned 1 [0076.142] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0076.142] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0076.142] lstrlenW (lpString="8") returned 1 [0076.142] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0076.142] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0076.142] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0076.142] lstrlenW (lpString="Execute: ") returned 9 [0076.142] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0076.142] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0076.143] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0076.143] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x4b [0076.143] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x4b [0076.143] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x4b, lParam=0x0) returned 0x1 [0076.144] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0076.144] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0076.144] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0076.144] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0076.144] lstrcpynW (in: lpString1=0x432ea0, lpString2="508", iMaxLength=1024 | out: lpString1="508") returned="508" [0076.144] lstrlenW (lpString="508") returned 3 [0076.144] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="516") returned 3 [0076.144] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.144] lstrlenW (lpString="") returned 0 [0076.144] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.144] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.144] lstrcpynW (in: lpString1=0x432ea0, lpString2="516", iMaxLength=1024 | out: lpString1="516") returned="516" [0076.144] lstrlenW (lpString="516") returned 3 [0076.144] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0076.145] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned 1023 [0076.145] lstrcpynW (in: lpString1=0x46d000, lpString2="A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0076.145] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0076.145] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0076.145] RegCloseKey (hKey=0x1c0) returned 0x0 [0076.145] lstrcpynW (in: lpString1=0x432ea4, lpString2="A2E11BF8", iMaxLength=1024 | out: lpString1="A2E11BF8") returned="A2E11BF8" [0076.145] lstrlenW (lpString="A2E11BF8") returned 8 [0076.145] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1466527332") returned 10 [0076.145] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0076.145] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0076.145] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0076.145] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0076.146] RegCloseKey (hKey=0x1c0) returned 0x0 [0076.146] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0076.146] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0076.146] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0076.146] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0076.146] lstrcpynW (in: lpString1=0x432ea0, lpString2="1466527332", iMaxLength=1024 | out: lpString1="1466527332") returned="1466527332" [0076.146] lstrlenW (lpString="1466527332") returned 10 [0076.146] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="57696E64") returned 8 [0076.146] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.146] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.146] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.147] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.147] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.147] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.147] lstrlenW (lpString="0") returned 1 [0076.147] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.147] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.147] lstrlenW (lpString="0") returned 1 [0076.147] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.147] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.147] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.147] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.147] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.147] lstrlenW (lpString="0") returned 1 [0076.147] lstrcpynW (in: lpString1=0x432ea0, lpString2="57696E64", iMaxLength=1024 | out: lpString1="57696E64") returned="57696E64" [0076.147] lstrlenW (lpString="57696E64") returned 8 [0076.147] lstrcpynW (in: lpString1=0x40a5f0, lpString2="57696E64", iMaxLength=1024 | out: lpString1="57696E64") returned="57696E64" [0076.147] lstrlenW (lpString="57696E64") returned 8 [0076.147] lstrcpynW (in: lpString1=0x46b000, lpString2="57696E64", iMaxLength=1024 | out: lpString1="57696E64") returned="57696E64" [0076.147] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.147] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.148] lstrlenW (lpString="") returned 0 [0076.148] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.148] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.148] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.148] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.148] lstrcpynW (in: lpString1=0x432ea4, lpString2="57", iMaxLength=1024 | out: lpString1="57") returned="57" [0076.148] lstrlenW (lpString="57") returned 2 [0076.148] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="W") returned 1 [0076.148] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.148] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.148] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.148] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.148] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.148] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.148] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.148] lstrcpynW (in: lpString1=0x432ea0, lpString2="W", iMaxLength=1024 | out: lpString1="W") returned="W" [0076.149] lstrlenW (lpString="W") returned 1 [0076.149] lstrcpynW (in: lpString1=0x40b5f0, lpString2="W", iMaxLength=1024 | out: lpString1="W") returned="W" [0076.149] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.149] lstrcmpiW (lpString1="W", lpString2="^") returned 1 [0076.149] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.149] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.149] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.149] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.149] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.149] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.149] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.149] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.149] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::Call", iMaxLength=1024 | out: lpString1="user32::Call") returned="user32::Call" [0076.150] lstrlenW (lpString="user32::Call") returned 12 [0076.150] lstrcpynW (in: lpString1=0x432eb8, lpString2="W", iMaxLength=1024 | out: lpString1="W") returned="W" [0076.150] lstrlenW (lpString="W") returned 1 [0076.150] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallW", iMaxLength=1024 | out: lpString1="user32::CallW") returned="user32::CallW" [0076.150] lstrlenW (lpString="user32::CallW") returned 13 [0076.150] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallW", iMaxLength=1024 | out: lpString1="user32::CallW") returned="user32::CallW" [0076.150] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.150] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.150] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.150] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.150] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.150] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.150] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.150] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.151] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.151] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.151] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.151] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.151] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.151] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.151] lstrlenW (lpString="C:\\Windows") returned 10 [0076.151] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.151] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.151] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.152] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.152] lstrlenW (lpString="524386") returned 6 [0076.152] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.152] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.152] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.152] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.152] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.152] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.152] lstrlenW (lpString="0") returned 1 [0076.152] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0076.152] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.152] lstrlenW (lpString="2") returned 1 [0076.152] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.152] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.152] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.152] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.152] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.152] lstrlenW (lpString="2") returned 1 [0076.152] lstrcpynW (in: lpString1=0x432ea0, lpString2="57696E64", iMaxLength=1024 | out: lpString1="57696E64") returned="57696E64" [0076.152] lstrlenW (lpString="57696E64") returned 8 [0076.152] lstrcpynW (in: lpString1=0x40a5f0, lpString2="57696E64", iMaxLength=1024 | out: lpString1="57696E64") returned="57696E64" [0076.153] lstrlenW (lpString="57696E64") returned 8 [0076.153] lstrcpynW (in: lpString1=0x46b000, lpString2="696E64", iMaxLength=1024 | out: lpString1="696E64") returned="696E64" [0076.153] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.153] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.153] lstrlenW (lpString="") returned 0 [0076.153] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.153] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.153] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.153] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.153] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0076.153] lstrlenW (lpString="69") returned 2 [0076.153] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0076.153] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.153] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.153] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.153] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.153] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.153] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.154] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.154] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0076.154] lstrlenW (lpString="i") returned 1 [0076.154] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0076.154] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.154] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0076.154] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.154] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.154] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.154] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.154] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.154] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.155] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.155] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.155] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallW", iMaxLength=1024 | out: lpString1="user32::CallW") returned="user32::CallW" [0076.155] lstrlenW (lpString="user32::CallW") returned 13 [0076.155] lstrcpynW (in: lpString1=0x432eba, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0076.155] lstrlenW (lpString="i") returned 1 [0076.155] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWi", iMaxLength=1024 | out: lpString1="user32::CallWi") returned="user32::CallWi" [0076.155] lstrlenW (lpString="user32::CallWi") returned 14 [0076.155] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWi", iMaxLength=1024 | out: lpString1="user32::CallWi") returned="user32::CallWi" [0076.155] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.155] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.155] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.155] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.155] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.155] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.156] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.156] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.156] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.156] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.156] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.156] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.156] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.156] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.156] lstrlenW (lpString="C:\\Windows") returned 10 [0076.156] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.157] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.157] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.157] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.157] lstrlenW (lpString="524386") returned 6 [0076.157] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.157] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.157] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.157] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.157] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.157] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.157] lstrlenW (lpString="2") returned 1 [0076.157] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0076.157] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.157] lstrlenW (lpString="4") returned 1 [0076.157] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.157] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.157] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.157] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.157] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.158] lstrlenW (lpString="4") returned 1 [0076.158] lstrcpynW (in: lpString1=0x432ea0, lpString2="57696E64", iMaxLength=1024 | out: lpString1="57696E64") returned="57696E64" [0076.158] lstrlenW (lpString="57696E64") returned 8 [0076.158] lstrcpynW (in: lpString1=0x40a5f0, lpString2="57696E64", iMaxLength=1024 | out: lpString1="57696E64") returned="57696E64" [0076.158] lstrlenW (lpString="57696E64") returned 8 [0076.158] lstrcpynW (in: lpString1=0x46b000, lpString2="6E64", iMaxLength=1024 | out: lpString1="6E64") returned="6E64" [0076.158] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.158] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.158] lstrlenW (lpString="") returned 0 [0076.158] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.158] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.158] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.158] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.158] lstrcpynW (in: lpString1=0x432ea4, lpString2="6E", iMaxLength=1024 | out: lpString1="6E") returned="6E" [0076.158] lstrlenW (lpString="6E") returned 2 [0076.158] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="n") returned 1 [0076.158] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.158] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.158] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.158] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.159] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.159] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.159] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.159] lstrcpynW (in: lpString1=0x432ea0, lpString2="n", iMaxLength=1024 | out: lpString1="n") returned="n" [0076.159] lstrlenW (lpString="n") returned 1 [0076.159] lstrcpynW (in: lpString1=0x40b5f0, lpString2="n", iMaxLength=1024 | out: lpString1="n") returned="n" [0076.159] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.159] lstrcmpiW (lpString1="n", lpString2="^") returned 1 [0076.159] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.159] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.159] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.159] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.159] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.159] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.161] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.161] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.161] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.161] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.161] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.161] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.161] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.161] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.161] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.162] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.162] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.162] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.162] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.162] lstrlenW (lpString="C:\\Windows") returned 10 [0076.162] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.162] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.162] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.162] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.162] lstrlenW (lpString="524386") returned 6 [0076.162] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.162] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.162] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.162] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.163] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.163] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.163] lstrlenW (lpString="4") returned 1 [0076.163] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0076.163] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.163] lstrlenW (lpString="6") returned 1 [0076.163] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.163] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.163] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.163] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.163] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.163] lstrlenW (lpString="6") returned 1 [0076.163] lstrcpynW (in: lpString1=0x432ea0, lpString2="57696E64", iMaxLength=1024 | out: lpString1="57696E64") returned="57696E64" [0076.163] lstrlenW (lpString="57696E64") returned 8 [0076.163] lstrcpynW (in: lpString1=0x40a5f0, lpString2="57696E64", iMaxLength=1024 | out: lpString1="57696E64") returned="57696E64" [0076.163] lstrlenW (lpString="57696E64") returned 8 [0076.163] lstrcpynW (in: lpString1=0x46b000, lpString2="64", iMaxLength=1024 | out: lpString1="64") returned="64" [0076.163] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.164] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.164] lstrlenW (lpString="") returned 0 [0076.164] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.164] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.164] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.164] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.164] lstrcpynW (in: lpString1=0x432ea4, lpString2="64", iMaxLength=1024 | out: lpString1="64") returned="64" [0076.164] lstrlenW (lpString="64") returned 2 [0076.164] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="d") returned 1 [0076.164] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.164] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.164] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.164] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.164] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.164] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.164] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.164] lstrcpynW (in: lpString1=0x432ea0, lpString2="d", iMaxLength=1024 | out: lpString1="d") returned="d" [0076.164] lstrlenW (lpString="d") returned 1 [0076.164] lstrcpynW (in: lpString1=0x40b5f0, lpString2="d", iMaxLength=1024 | out: lpString1="d") returned="d" [0076.165] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.165] lstrcmpiW (lpString1="d", lpString2="^") returned 1 [0076.165] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.165] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.165] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.165] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.165] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.165] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.165] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.165] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.165] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWin", iMaxLength=1024 | out: lpString1="user32::CallWin") returned="user32::CallWin" [0076.165] lstrlenW (lpString="user32::CallWin") returned 15 [0076.165] lstrcpynW (in: lpString1=0x432ebe, lpString2="d", iMaxLength=1024 | out: lpString1="d") returned="d" [0076.165] lstrlenW (lpString="d") returned 1 [0076.166] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWind", iMaxLength=1024 | out: lpString1="user32::CallWind") returned="user32::CallWind" [0076.166] lstrlenW (lpString="user32::CallWind") returned 16 [0076.166] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWind", iMaxLength=1024 | out: lpString1="user32::CallWind") returned="user32::CallWind" [0076.166] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.166] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.166] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.166] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.166] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.166] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.166] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.166] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.166] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.166] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.167] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.167] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.167] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.167] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.167] lstrlenW (lpString="C:\\Windows") returned 10 [0076.167] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.167] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.167] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.167] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.167] lstrlenW (lpString="524386") returned 6 [0076.167] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.167] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.167] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.168] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.168] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.168] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.168] lstrlenW (lpString="6") returned 1 [0076.168] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0076.168] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0076.168] lstrlenW (lpString="8") returned 1 [0076.168] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0076.168] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0076.168] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0076.168] lstrlenW (lpString="Execute: ") returned 9 [0076.168] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0076.168] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0076.168] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0076.169] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x4c [0076.169] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x4c [0076.169] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x4c, lParam=0x0) returned 0x1 [0076.169] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0076.169] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0076.169] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0076.170] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0076.170] lstrcpynW (in: lpString1=0x432ea0, lpString2="516", iMaxLength=1024 | out: lpString1="516") returned="516" [0076.170] lstrlenW (lpString="516") returned 3 [0076.170] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="524") returned 3 [0076.170] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.170] lstrlenW (lpString="") returned 0 [0076.170] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.170] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.170] lstrcpynW (in: lpString1=0x432ea0, lpString2="524", iMaxLength=1024 | out: lpString1="524") returned="524" [0076.170] lstrlenW (lpString="524") returned 3 [0076.170] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0076.170] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0076.170] lstrcpynW (in: lpString1=0x46d000, lpString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iMaxLength=1024 | out: lpString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returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0076.170] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0076.171] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0076.171] RegCloseKey (hKey=0x1c0) returned 0x0 [0076.171] lstrcpynW (in: lpString1=0x432ea4, lpString2="9AFF25EE", iMaxLength=1024 | out: lpString1="9AFF25EE") returned="9AFF25EE" [0076.171] lstrlenW (lpString="9AFF25EE") returned 8 [0076.171] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1870090354") returned 10 [0076.171] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0076.171] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0076.171] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0076.171] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0076.171] RegCloseKey (hKey=0x1c0) returned 0x0 [0076.171] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0076.171] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0076.171] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0076.172] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0076.172] lstrcpynW (in: lpString1=0x432ea0, lpString2="1870090354", iMaxLength=1024 | out: lpString1="1870090354") returned="1870090354" [0076.172] lstrlenW (lpString="1870090354") returned 10 [0076.172] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="6F775072") returned 8 [0076.172] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.172] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.172] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.172] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.172] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.172] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.172] lstrlenW (lpString="0") returned 1 [0076.172] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.172] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.172] lstrlenW (lpString="0") returned 1 [0076.172] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.172] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.173] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.173] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.173] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.173] lstrlenW (lpString="0") returned 1 [0076.173] lstrcpynW (in: lpString1=0x432ea0, lpString2="6F775072", iMaxLength=1024 | out: lpString1="6F775072") returned="6F775072" [0076.173] lstrlenW (lpString="6F775072") returned 8 [0076.173] lstrcpynW (in: lpString1=0x40a5f0, lpString2="6F775072", iMaxLength=1024 | out: lpString1="6F775072") returned="6F775072" [0076.173] lstrlenW (lpString="6F775072") returned 8 [0076.173] lstrcpynW (in: lpString1=0x46b000, lpString2="6F775072", iMaxLength=1024 | out: lpString1="6F775072") returned="6F775072" [0076.173] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.173] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.173] lstrlenW (lpString="") returned 0 [0076.173] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.173] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.173] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.173] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.173] lstrcpynW (in: lpString1=0x432ea4, lpString2="6F", iMaxLength=1024 | out: lpString1="6F") returned="6F" [0076.173] lstrlenW (lpString="6F") returned 2 [0076.173] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="o") returned 1 [0076.173] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.173] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.173] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.174] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.174] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.174] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.174] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.174] lstrcpynW (in: lpString1=0x432ea0, lpString2="o", iMaxLength=1024 | out: lpString1="o") returned="o" [0076.174] lstrlenW (lpString="o") returned 1 [0076.174] lstrcpynW (in: lpString1=0x40b5f0, lpString2="o", iMaxLength=1024 | out: lpString1="o") returned="o" [0076.174] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.174] lstrcmpiW (lpString1="o", lpString2="^") returned 1 [0076.174] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.174] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.174] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.174] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.174] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.174] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.175] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.175] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.175] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWind", iMaxLength=1024 | out: lpString1="user32::CallWind") returned="user32::CallWind" [0076.175] lstrlenW (lpString="user32::CallWind") returned 16 [0076.175] lstrcpynW (in: lpString1=0x432ec0, lpString2="o", iMaxLength=1024 | out: lpString1="o") returned="o" [0076.175] lstrlenW (lpString="o") returned 1 [0076.175] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindo", iMaxLength=1024 | out: lpString1="user32::CallWindo") returned="user32::CallWindo" [0076.175] lstrlenW (lpString="user32::CallWindo") returned 17 [0076.175] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindo", iMaxLength=1024 | out: lpString1="user32::CallWindo") returned="user32::CallWindo" [0076.175] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.175] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.175] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.175] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.175] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.176] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.176] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.176] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.176] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.176] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.176] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.176] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.176] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.176] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.176] lstrlenW (lpString="C:\\Windows") returned 10 [0076.177] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.177] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.177] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.177] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.177] lstrlenW (lpString="524386") returned 6 [0076.177] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.177] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.177] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.177] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.177] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.177] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.177] lstrlenW (lpString="0") returned 1 [0076.177] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0076.177] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.177] lstrlenW (lpString="2") returned 1 [0076.177] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.177] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.177] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.177] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.177] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.178] lstrlenW (lpString="2") returned 1 [0076.178] lstrcpynW (in: lpString1=0x432ea0, lpString2="6F775072", iMaxLength=1024 | out: lpString1="6F775072") returned="6F775072" [0076.178] lstrlenW (lpString="6F775072") returned 8 [0076.178] lstrcpynW (in: lpString1=0x40a5f0, lpString2="6F775072", iMaxLength=1024 | out: lpString1="6F775072") returned="6F775072" [0076.178] lstrlenW (lpString="6F775072") returned 8 [0076.178] lstrcpynW (in: lpString1=0x46b000, lpString2="775072", iMaxLength=1024 | out: lpString1="775072") returned="775072" [0076.178] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.178] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.178] lstrlenW (lpString="") returned 0 [0076.178] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.178] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.178] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.178] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.178] lstrcpynW (in: lpString1=0x432ea4, lpString2="77", iMaxLength=1024 | out: lpString1="77") returned="77" [0076.178] lstrlenW (lpString="77") returned 2 [0076.178] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="w") returned 1 [0076.178] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.178] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.178] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.178] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.179] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.179] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.179] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.179] lstrcpynW (in: lpString1=0x432ea0, lpString2="w", iMaxLength=1024 | out: lpString1="w") returned="w" [0076.179] lstrlenW (lpString="w") returned 1 [0076.179] lstrcpynW (in: lpString1=0x40b5f0, lpString2="w", iMaxLength=1024 | out: lpString1="w") returned="w" [0076.179] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.179] lstrcmpiW (lpString1="w", lpString2="^") returned 1 [0076.179] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.179] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.179] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.179] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.180] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.180] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.180] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.180] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.180] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindo", iMaxLength=1024 | out: lpString1="user32::CallWindo") returned="user32::CallWindo" [0076.180] lstrlenW (lpString="user32::CallWindo") returned 17 [0076.180] lstrcpynW (in: lpString1=0x432ec2, lpString2="w", iMaxLength=1024 | out: lpString1="w") returned="w" [0076.180] lstrlenW (lpString="w") returned 1 [0076.180] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindow", iMaxLength=1024 | out: lpString1="user32::CallWindow") returned="user32::CallWindow" [0076.180] lstrlenW (lpString="user32::CallWindow") returned 18 [0076.180] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindow", iMaxLength=1024 | out: lpString1="user32::CallWindow") returned="user32::CallWindow" [0076.180] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.180] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.180] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.180] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.181] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.181] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.181] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.181] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.181] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.181] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.181] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.181] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.181] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.182] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.182] lstrlenW (lpString="C:\\Windows") returned 10 [0076.182] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.182] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.182] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.182] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.182] lstrlenW (lpString="524386") returned 6 [0076.182] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.182] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.182] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.182] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.182] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.182] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.182] lstrlenW (lpString="2") returned 1 [0076.182] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0076.182] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.182] lstrlenW (lpString="4") returned 1 [0076.183] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.183] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.183] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.183] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.183] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.183] lstrlenW (lpString="4") returned 1 [0076.183] lstrcpynW (in: lpString1=0x432ea0, lpString2="6F775072", iMaxLength=1024 | out: lpString1="6F775072") returned="6F775072" [0076.183] lstrlenW (lpString="6F775072") returned 8 [0076.183] lstrcpynW (in: lpString1=0x40a5f0, lpString2="6F775072", iMaxLength=1024 | out: lpString1="6F775072") returned="6F775072" [0076.183] lstrlenW (lpString="6F775072") returned 8 [0076.183] lstrcpynW (in: lpString1=0x46b000, lpString2="5072", iMaxLength=1024 | out: lpString1="5072") returned="5072" [0076.183] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.183] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.183] lstrlenW (lpString="") returned 0 [0076.183] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.183] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.183] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.183] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.183] lstrcpynW (in: lpString1=0x432ea4, lpString2="50", iMaxLength=1024 | out: lpString1="50") returned="50" [0076.183] lstrlenW (lpString="50") returned 2 [0076.183] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="P") returned 1 [0076.183] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.183] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.184] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.184] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.184] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.184] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.184] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.184] lstrcpynW (in: lpString1=0x432ea0, lpString2="P", iMaxLength=1024 | out: lpString1="P") returned="P" [0076.184] lstrlenW (lpString="P") returned 1 [0076.184] lstrcpynW (in: lpString1=0x40b5f0, lpString2="P", iMaxLength=1024 | out: lpString1="P") returned="P" [0076.184] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.184] lstrcmpiW (lpString1="P", lpString2="^") returned 1 [0076.184] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.184] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.184] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.184] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.185] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.185] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.185] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.185] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.185] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindow", iMaxLength=1024 | out: lpString1="user32::CallWindow") returned="user32::CallWindow" [0076.185] lstrlenW (lpString="user32::CallWindow") returned 18 [0076.185] lstrcpynW (in: lpString1=0x432ec4, lpString2="P", iMaxLength=1024 | out: lpString1="P") returned="P" [0076.185] lstrlenW (lpString="P") returned 1 [0076.185] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindowP", iMaxLength=1024 | out: lpString1="user32::CallWindowP") returned="user32::CallWindowP" [0076.185] lstrlenW (lpString="user32::CallWindowP") returned 19 [0076.185] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindowP", iMaxLength=1024 | out: lpString1="user32::CallWindowP") returned="user32::CallWindowP" [0076.185] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.185] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.185] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.185] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.186] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.186] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.186] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.186] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.186] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.186] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.186] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.186] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.186] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.186] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.187] lstrlenW (lpString="C:\\Windows") returned 10 [0076.187] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.187] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.187] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.187] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.187] lstrlenW (lpString="524386") returned 6 [0076.187] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.187] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.187] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.187] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.187] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.187] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.187] lstrlenW (lpString="4") returned 1 [0076.187] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0076.187] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.187] lstrlenW (lpString="6") returned 1 [0076.187] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.187] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.187] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.188] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.188] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.188] lstrlenW (lpString="6") returned 1 [0076.188] lstrcpynW (in: lpString1=0x432ea0, lpString2="6F775072", iMaxLength=1024 | out: lpString1="6F775072") returned="6F775072" [0076.188] lstrlenW (lpString="6F775072") returned 8 [0076.188] lstrcpynW (in: lpString1=0x40a5f0, lpString2="6F775072", iMaxLength=1024 | out: lpString1="6F775072") returned="6F775072" [0076.188] lstrlenW (lpString="6F775072") returned 8 [0076.188] lstrcpynW (in: lpString1=0x46b000, lpString2="72", iMaxLength=1024 | out: lpString1="72") returned="72" [0076.188] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.188] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.188] lstrlenW (lpString="") returned 0 [0076.188] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.188] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.188] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.188] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.188] lstrcpynW (in: lpString1=0x432ea4, lpString2="72", iMaxLength=1024 | out: lpString1="72") returned="72" [0076.188] lstrlenW (lpString="72") returned 2 [0076.188] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="r") returned 1 [0076.188] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.188] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.188] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.188] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.189] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.189] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.189] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.189] lstrcpynW (in: lpString1=0x432ea0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0076.189] lstrlenW (lpString="r") returned 1 [0076.189] lstrcpynW (in: lpString1=0x40b5f0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0076.189] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.189] lstrcmpiW (lpString1="r", lpString2="^") returned 1 [0076.189] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.189] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.189] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.189] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.189] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.189] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.190] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.190] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.190] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindowP", iMaxLength=1024 | out: lpString1="user32::CallWindowP") returned="user32::CallWindowP" [0076.190] lstrlenW (lpString="user32::CallWindowP") returned 19 [0076.190] lstrcpynW (in: lpString1=0x432ec6, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0076.190] lstrlenW (lpString="r") returned 1 [0076.190] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindowPr", iMaxLength=1024 | out: lpString1="user32::CallWindowPr") returned="user32::CallWindowPr" [0076.190] lstrlenW (lpString="user32::CallWindowPr") returned 20 [0076.190] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindowPr", iMaxLength=1024 | out: lpString1="user32::CallWindowPr") returned="user32::CallWindowPr" [0076.190] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.190] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.190] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.190] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.190] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.190] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.190] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.190] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.191] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.191] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.191] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.191] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.191] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.191] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.191] lstrlenW (lpString="C:\\Windows") returned 10 [0076.191] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.191] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.191] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.192] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.192] lstrlenW (lpString="524386") returned 6 [0076.192] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.192] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.192] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.192] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.192] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.192] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.192] lstrlenW (lpString="6") returned 1 [0076.192] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0076.192] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0076.192] lstrlenW (lpString="8") returned 1 [0076.192] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0076.192] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0076.192] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0076.192] lstrlenW (lpString="Execute: ") returned 9 [0076.192] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0076.192] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0076.192] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0076.193] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x4d [0076.193] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x4d [0076.193] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x4d, lParam=0x0) returned 0x1 [0076.194] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0076.194] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0076.194] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0076.194] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0076.194] lstrcpynW (in: lpString1=0x432ea0, lpString2="524", iMaxLength=1024 | out: lpString1="524") returned="524" [0076.194] lstrlenW (lpString="524") returned 3 [0076.194] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="532") returned 3 [0076.194] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.194] lstrlenW (lpString="") returned 0 [0076.194] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.194] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.194] lstrcpynW (in: lpString1=0x432ea0, lpString2="532", iMaxLength=1024 | out: lpString1="532") returned="532" [0076.194] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0076.195] lstrcpynW (in: lpString1=0x46d000, lpString2="9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString1="9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0076.195] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0076.195] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0076.195] RegCloseKey (hKey=0x1c0) returned 0x0 [0076.195] lstrcpynW (in: lpString1=0x432ea4, lpString2="9AEB22B4", iMaxLength=1024 | out: lpString1="9AEB22B4") returned="9AEB22B4" [0076.195] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1868781352") returned 10 [0076.195] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0076.195] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0076.195] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0076.195] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0076.195] RegCloseKey (hKey=0x1c0) returned 0x0 [0076.196] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0076.196] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0076.196] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0076.196] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0076.196] lstrcpynW (in: lpString1=0x432ea0, lpString2="1868781352", iMaxLength=1024 | out: lpString1="1868781352") returned="1868781352" [0076.196] lstrlenW (lpString="1868781352") returned 10 [0076.196] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="6F635728") returned 8 [0076.196] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.196] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.196] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.196] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.197] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.197] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.197] lstrlenW (lpString="0") returned 1 [0076.197] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.197] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.197] lstrlenW (lpString="0") returned 1 [0076.197] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.197] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.197] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.197] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.197] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.197] lstrlenW (lpString="0") returned 1 [0076.197] lstrcpynW (in: lpString1=0x432ea0, lpString2="6F635728", iMaxLength=1024 | out: lpString1="6F635728") returned="6F635728" [0076.197] lstrlenW (lpString="6F635728") returned 8 [0076.197] lstrcpynW (in: lpString1=0x40a5f0, lpString2="6F635728", iMaxLength=1024 | out: lpString1="6F635728") returned="6F635728" [0076.197] lstrlenW (lpString="6F635728") returned 8 [0076.197] lstrcpynW (in: lpString1=0x46b000, lpString2="6F635728", iMaxLength=1024 | out: lpString1="6F635728") returned="6F635728" [0076.197] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.197] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.197] lstrlenW (lpString="") returned 0 [0076.197] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.197] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.197] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.197] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.198] lstrcpynW (in: lpString1=0x432ea4, lpString2="6F", iMaxLength=1024 | out: lpString1="6F") returned="6F" [0076.198] lstrlenW (lpString="6F") returned 2 [0076.198] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="o") returned 1 [0076.198] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.198] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.198] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.198] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.198] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.198] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.198] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.198] lstrcpynW (in: lpString1=0x432ea0, lpString2="o", iMaxLength=1024 | out: lpString1="o") returned="o" [0076.198] lstrlenW (lpString="o") returned 1 [0076.198] lstrcpynW (in: lpString1=0x40b5f0, lpString2="o", iMaxLength=1024 | out: lpString1="o") returned="o" [0076.198] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.198] lstrcmpiW (lpString1="o", lpString2="^") returned 1 [0076.198] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.198] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.199] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.199] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.199] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.199] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.199] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.199] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.199] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindowPr", iMaxLength=1024 | out: lpString1="user32::CallWindowPr") returned="user32::CallWindowPr" [0076.199] lstrlenW (lpString="user32::CallWindowPr") returned 20 [0076.199] lstrcpynW (in: lpString1=0x432ec8, lpString2="o", iMaxLength=1024 | out: lpString1="o") returned="o" [0076.199] lstrlenW (lpString="o") returned 1 [0076.199] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindowPro", iMaxLength=1024 | out: lpString1="user32::CallWindowPro") returned="user32::CallWindowPro" [0076.199] lstrlenW (lpString="user32::CallWindowPro") returned 21 [0076.199] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindowPro", iMaxLength=1024 | out: lpString1="user32::CallWindowPro") returned="user32::CallWindowPro" [0076.199] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.200] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.200] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.200] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.200] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.200] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.200] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.200] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.200] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.200] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.201] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.201] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.201] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.201] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.201] lstrlenW (lpString="C:\\Windows") returned 10 [0076.201] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.201] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.201] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.201] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.201] lstrlenW (lpString="524386") returned 6 [0076.201] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.201] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.201] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.201] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.202] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.202] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.202] lstrlenW (lpString="0") returned 1 [0076.202] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0076.202] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.202] lstrlenW (lpString="2") returned 1 [0076.202] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.202] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.202] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.202] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.202] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.202] lstrlenW (lpString="2") returned 1 [0076.202] lstrcpynW (in: lpString1=0x432ea0, lpString2="6F635728", iMaxLength=1024 | out: lpString1="6F635728") returned="6F635728" [0076.202] lstrlenW (lpString="6F635728") returned 8 [0076.202] lstrcpynW (in: lpString1=0x40a5f0, lpString2="6F635728", iMaxLength=1024 | out: lpString1="6F635728") returned="6F635728" [0076.202] lstrlenW (lpString="6F635728") returned 8 [0076.202] lstrcpynW (in: lpString1=0x46b000, lpString2="635728", iMaxLength=1024 | out: lpString1="635728") returned="635728" [0076.202] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.202] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.202] lstrlenW (lpString="") returned 0 [0076.202] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.202] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.202] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.202] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.202] lstrcpynW (in: lpString1=0x432ea4, lpString2="63", iMaxLength=1024 | out: lpString1="63") returned="63" [0076.202] lstrlenW (lpString="63") returned 2 [0076.203] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="c") returned 1 [0076.203] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.203] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.203] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.203] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.203] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.203] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.203] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.203] lstrcpynW (in: lpString1=0x432ea0, lpString2="c", iMaxLength=1024 | out: lpString1="c") returned="c" [0076.203] lstrlenW (lpString="c") returned 1 [0076.203] lstrcpynW (in: lpString1=0x40b5f0, lpString2="c", iMaxLength=1024 | out: lpString1="c") returned="c" [0076.203] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.203] lstrcmpiW (lpString1="c", lpString2="^") returned 1 [0076.203] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.203] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.204] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.204] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.204] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.204] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.204] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.204] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.204] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindowPro", iMaxLength=1024 | out: lpString1="user32::CallWindowPro") returned="user32::CallWindowPro" [0076.204] lstrlenW (lpString="user32::CallWindowPro") returned 21 [0076.204] lstrcpynW (in: lpString1=0x432eca, lpString2="c", iMaxLength=1024 | out: lpString1="c") returned="c" [0076.204] lstrlenW (lpString="c") returned 1 [0076.204] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindowProc", iMaxLength=1024 | out: lpString1="user32::CallWindowProc") returned="user32::CallWindowProc" [0076.204] lstrlenW (lpString="user32::CallWindowProc") returned 22 [0076.204] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindowProc", iMaxLength=1024 | out: lpString1="user32::CallWindowProc") returned="user32::CallWindowProc" [0076.204] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.205] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.205] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.205] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.205] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.205] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.205] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.205] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.205] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.205] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.205] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.206] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.206] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.206] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.206] lstrlenW (lpString="C:\\Windows") returned 10 [0076.206] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.206] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.206] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.206] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.206] lstrlenW (lpString="524386") returned 6 [0076.206] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.206] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.206] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.206] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.206] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.207] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0076.207] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.207] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.207] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.207] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.207] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.207] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="W") returned 1 [0076.207] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.207] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.207] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.207] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.207] lstrcmpiW (lpString1="W", lpString2="^") returned 1 [0076.207] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.207] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.207] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.208] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.208] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.208] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.208] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.208] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.208] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindowProc", iMaxLength=1024 | out: lpString1="user32::CallWindowProc") returned="user32::CallWindowProc" [0076.208] lstrlenW (lpString="user32::CallWindowProc") returned 22 [0076.208] lstrcpynW (in: lpString1=0x432ecc, lpString2="W", iMaxLength=1024 | out: lpString1="W") returned="W" [0076.208] lstrlenW (lpString="W") returned 1 [0076.208] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindowProcW", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW") returned="user32::CallWindowProcW" [0076.208] lstrlenW (lpString="user32::CallWindowProcW") returned 23 [0076.208] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindowProcW", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW") returned="user32::CallWindowProcW" [0076.208] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.208] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.209] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.209] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.209] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.209] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.209] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.209] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.209] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.209] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.209] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.210] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.210] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.210] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.210] lstrlenW (lpString="C:\\Windows") returned 10 [0076.210] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.210] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.211] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.211] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.211] lstrlenW (lpString="524386") returned 6 [0076.211] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.211] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.211] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.211] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.211] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.211] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.211] lstrlenW (lpString="4") returned 1 [0076.211] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0076.211] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.211] lstrlenW (lpString="6") returned 1 [0076.211] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.211] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.211] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.211] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.211] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.212] lstrlenW (lpString="6") returned 1 [0076.212] lstrcpynW (in: lpString1=0x432ea0, lpString2="6F635728", iMaxLength=1024 | out: lpString1="6F635728") returned="6F635728" [0076.212] lstrlenW (lpString="6F635728") returned 8 [0076.212] lstrcpynW (in: lpString1=0x40a5f0, lpString2="6F635728", iMaxLength=1024 | out: lpString1="6F635728") returned="6F635728" [0076.212] lstrlenW (lpString="6F635728") returned 8 [0076.212] lstrcpynW (in: lpString1=0x46b000, lpString2="28", iMaxLength=1024 | out: lpString1="28") returned="28" [0076.212] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.212] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.212] lstrlenW (lpString="") returned 0 [0076.212] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.212] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.212] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.212] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.212] lstrcpynW (in: lpString1=0x432ea4, lpString2="28", iMaxLength=1024 | out: lpString1="28") returned="28" [0076.212] lstrlenW (lpString="28") returned 2 [0076.212] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="(") returned 1 [0076.212] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.212] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.212] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.213] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.213] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.213] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.213] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.213] lstrcpynW (in: lpString1=0x432ea0, lpString2="(", iMaxLength=1024 | out: lpString1="(") returned="(" [0076.213] lstrlenW (lpString="(") returned 1 [0076.213] lstrcpynW (in: lpString1=0x40b5f0, lpString2="(", iMaxLength=1024 | out: lpString1="(") returned="(" [0076.213] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.213] lstrcmpiW (lpString1="(", lpString2="^") returned -1 [0076.213] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.213] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.213] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.213] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.213] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.213] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.214] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.214] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.214] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindowProcW", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW") returned="user32::CallWindowProcW" [0076.214] lstrlenW (lpString="user32::CallWindowProcW") returned 23 [0076.214] lstrcpynW (in: lpString1=0x432ece, lpString2="(", iMaxLength=1024 | out: lpString1="(") returned="(" [0076.214] lstrlenW (lpString="(") returned 1 [0076.214] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindowProcW(", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(") returned="user32::CallWindowProcW(" [0076.214] lstrlenW (lpString="user32::CallWindowProcW(") returned 24 [0076.214] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindowProcW(", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(") returned="user32::CallWindowProcW(" [0076.214] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.214] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.214] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.214] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.214] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.215] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.215] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.215] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.215] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.215] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.215] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.215] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.215] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.215] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.216] lstrlenW (lpString="C:\\Windows") returned 10 [0076.216] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.216] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.216] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.216] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.216] lstrlenW (lpString="524386") returned 6 [0076.216] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.216] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.216] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.216] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.216] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.216] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.216] lstrlenW (lpString="6") returned 1 [0076.216] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0076.216] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0076.216] lstrlenW (lpString="8") returned 1 [0076.217] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0076.217] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0076.217] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0076.217] lstrlenW (lpString="Execute: ") returned 9 [0076.217] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0076.217] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0076.217] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0076.217] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x4e [0076.217] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x4e [0076.218] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x4e, lParam=0x0) returned 0x1 [0076.218] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0076.218] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0076.218] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0076.218] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0076.218] lstrcpynW (in: lpString1=0x432ea0, lpString2="532", iMaxLength=1024 | out: lpString1="532") returned="532" [0076.219] lstrlenW (lpString="532") returned 3 [0076.219] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="540") returned 3 [0076.219] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.219] lstrlenW (lpString="") returned 0 [0076.219] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.219] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.219] lstrcpynW (in: lpString1=0x432ea0, lpString2="540", iMaxLength=1024 | out: lpString1="540") returned="540" [0076.219] lstrlenW (lpString="540") returned 3 [0076.219] lstrcpynW (in: lpString1=0x432ea0, lpString2="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0076.219] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0076.219] lstrcpynW (in: lpString1=0x46d000, lpString2="9CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString1="9CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned="9CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0076.219] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0076.219] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0076.219] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0076.219] RegCloseKey (hKey=0x1c0) returned 0x0 [0076.219] lstrcpynW (in: lpString1=0x432ea4, lpString2="9CFA44BC", iMaxLength=1024 | out: lpString1="9CFA44BC") returned="9CFA44BC" [0076.220] lstrlenW (lpString="9CFA44BC") returned 8 [0076.220] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="1769091360") returned 10 [0076.220] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0076.220] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0076.220] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0076.220] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0076.220] RegCloseKey (hKey=0x1c0) returned 0x0 [0076.220] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0076.220] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0076.220] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0076.220] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0076.220] lstrcpynW (in: lpString1=0x432ea0, lpString2="1769091360", iMaxLength=1024 | out: lpString1="1769091360") returned="1769091360" [0076.221] lstrlenW (lpString="1769091360") returned 10 [0076.221] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="69723120") returned 8 [0076.221] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.221] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.221] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.221] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.221] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.221] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.221] lstrlenW (lpString="0") returned 1 [0076.221] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.221] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.221] lstrlenW (lpString="0") returned 1 [0076.221] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.221] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.221] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.221] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.221] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.222] lstrlenW (lpString="0") returned 1 [0076.222] lstrcpynW (in: lpString1=0x432ea0, lpString2="69723120", iMaxLength=1024 | out: lpString1="69723120") returned="69723120" [0076.222] lstrlenW (lpString="69723120") returned 8 [0076.222] lstrcpynW (in: lpString1=0x40a5f0, lpString2="69723120", iMaxLength=1024 | out: lpString1="69723120") returned="69723120" [0076.222] lstrlenW (lpString="69723120") returned 8 [0076.222] lstrcpynW (in: lpString1=0x46b000, lpString2="69723120", iMaxLength=1024 | out: lpString1="69723120") returned="69723120" [0076.222] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.222] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.222] lstrlenW (lpString="") returned 0 [0076.222] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.222] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.222] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.222] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.222] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0076.222] lstrlenW (lpString="69") returned 2 [0076.222] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0076.222] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.222] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.222] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.223] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.223] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.223] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.223] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.223] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0076.223] lstrlenW (lpString="i") returned 1 [0076.223] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0076.223] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.223] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0076.223] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.223] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.223] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.223] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.223] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.223] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.224] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.224] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.224] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindowProcW(", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(") returned="user32::CallWindowProcW(" [0076.224] lstrlenW (lpString="user32::CallWindowProcW(") returned 24 [0076.224] lstrcpynW (in: lpString1=0x432ed0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0076.224] lstrlenW (lpString="i") returned 1 [0076.224] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindowProcW(i", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(i") returned="user32::CallWindowProcW(i" [0076.224] lstrlenW (lpString="user32::CallWindowProcW(i") returned 25 [0076.224] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindowProcW(i", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(i") returned="user32::CallWindowProcW(i" [0076.224] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.224] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.224] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.224] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.225] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.225] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.225] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.225] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.225] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.225] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.225] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.225] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.225] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.226] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.227] lstrlenW (lpString="C:\\Windows") returned 10 [0076.227] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.227] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.227] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.227] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.227] lstrlenW (lpString="524386") returned 6 [0076.227] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.227] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.227] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.228] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.228] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.228] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.228] lstrlenW (lpString="0") returned 1 [0076.228] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0076.228] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.228] lstrlenW (lpString="2") returned 1 [0076.228] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.228] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.228] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.228] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.228] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.228] lstrlenW (lpString="2") returned 1 [0076.228] lstrcpynW (in: lpString1=0x432ea0, lpString2="69723120", iMaxLength=1024 | out: lpString1="69723120") returned="69723120" [0076.228] lstrlenW (lpString="69723120") returned 8 [0076.228] lstrcpynW (in: lpString1=0x40a5f0, lpString2="69723120", iMaxLength=1024 | out: lpString1="69723120") returned="69723120" [0076.228] lstrlenW (lpString="69723120") returned 8 [0076.228] lstrcpynW (in: lpString1=0x46b000, lpString2="723120", iMaxLength=1024 | out: lpString1="723120") returned="723120" [0076.228] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.228] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.228] lstrlenW (lpString="") returned 0 [0076.228] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.228] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.229] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.229] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.229] lstrcpynW (in: lpString1=0x432ea4, lpString2="72", iMaxLength=1024 | out: lpString1="72") returned="72" [0076.229] lstrlenW (lpString="72") returned 2 [0076.229] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="r") returned 1 [0076.229] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.229] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.229] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.229] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.229] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.229] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.229] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.229] lstrcpynW (in: lpString1=0x432ea0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0076.229] lstrlenW (lpString="r") returned 1 [0076.229] lstrcpynW (in: lpString1=0x40b5f0, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0076.229] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.229] lstrcmpiW (lpString1="r", lpString2="^") returned 1 [0076.229] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.230] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.230] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.230] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.230] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.230] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.230] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.230] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.230] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindowProcW(i", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(i") returned="user32::CallWindowProcW(i" [0076.230] lstrlenW (lpString="user32::CallWindowProcW(i") returned 25 [0076.230] lstrcpynW (in: lpString1=0x432ed2, lpString2="r", iMaxLength=1024 | out: lpString1="r") returned="r" [0076.230] lstrlenW (lpString="r") returned 1 [0076.230] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindowProcW(ir", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir") returned="user32::CallWindowProcW(ir" [0076.230] lstrlenW (lpString="user32::CallWindowProcW(ir") returned 26 [0076.231] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindowProcW(ir", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir") returned="user32::CallWindowProcW(ir" [0076.231] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.231] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.231] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.231] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.231] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.231] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.231] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.231] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.231] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.231] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.232] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.232] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.232] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.232] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.232] lstrlenW (lpString="C:\\Windows") returned 10 [0076.232] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.232] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.232] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.232] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.232] lstrlenW (lpString="524386") returned 6 [0076.232] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.232] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.232] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.233] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.233] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.233] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.233] lstrlenW (lpString="2") returned 1 [0076.233] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0076.233] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.233] lstrlenW (lpString="4") returned 1 [0076.233] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.233] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.233] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.233] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.233] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.233] lstrlenW (lpString="4") returned 1 [0076.233] lstrcpynW (in: lpString1=0x432ea0, lpString2="69723120", iMaxLength=1024 | out: lpString1="69723120") returned="69723120" [0076.233] lstrlenW (lpString="69723120") returned 8 [0076.233] lstrcpynW (in: lpString1=0x40a5f0, lpString2="69723120", iMaxLength=1024 | out: lpString1="69723120") returned="69723120" [0076.233] lstrlenW (lpString="69723120") returned 8 [0076.233] lstrcpynW (in: lpString1=0x46b000, lpString2="3120", iMaxLength=1024 | out: lpString1="3120") returned="3120" [0076.233] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.233] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.233] lstrlenW (lpString="") returned 0 [0076.233] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.233] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.234] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.234] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.234] lstrcpynW (in: lpString1=0x432ea4, lpString2="31", iMaxLength=1024 | out: lpString1="31") returned="31" [0076.234] lstrlenW (lpString="31") returned 2 [0076.234] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="1") returned 1 [0076.234] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.234] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.234] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.234] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.234] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.234] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.234] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.234] lstrcpynW (in: lpString1=0x432ea0, lpString2="1", iMaxLength=1024 | out: lpString1="1") returned="1" [0076.234] lstrlenW (lpString="1") returned 1 [0076.234] lstrcpynW (in: lpString1=0x40b5f0, lpString2="1", iMaxLength=1024 | out: lpString1="1") returned="1" [0076.234] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.234] lstrcmpiW (lpString1="1", lpString2="^") returned 1 [0076.234] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.235] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.235] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.235] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.235] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.235] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.235] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.235] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.235] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindowProcW(ir", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir") returned="user32::CallWindowProcW(ir" [0076.235] lstrlenW (lpString="user32::CallWindowProcW(ir") returned 26 [0076.235] lstrcpynW (in: lpString1=0x432ed4, lpString2="1", iMaxLength=1024 | out: lpString1="1") returned="1" [0076.235] lstrlenW (lpString="1") returned 1 [0076.235] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindowProcW(ir1", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1") returned="user32::CallWindowProcW(ir1" [0076.235] lstrlenW (lpString="user32::CallWindowProcW(ir1") returned 27 [0076.235] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindowProcW(ir1", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1") returned="user32::CallWindowProcW(ir1" [0076.235] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.236] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.236] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.236] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.236] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.236] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.236] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.236] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.236] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.236] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.236] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.237] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.237] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.237] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.237] lstrlenW (lpString="C:\\Windows") returned 10 [0076.237] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.237] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.237] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.237] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.237] lstrlenW (lpString="524386") returned 6 [0076.237] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.237] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.237] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.237] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.238] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.238] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.238] lstrlenW (lpString="4") returned 1 [0076.238] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0076.238] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.238] lstrlenW (lpString="6") returned 1 [0076.238] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.238] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.238] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.238] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.238] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.238] lstrlenW (lpString="6") returned 1 [0076.238] lstrcpynW (in: lpString1=0x432ea0, lpString2="69723120", iMaxLength=1024 | out: lpString1="69723120") returned="69723120" [0076.238] lstrlenW (lpString="69723120") returned 8 [0076.238] lstrcpynW (in: lpString1=0x40a5f0, lpString2="69723120", iMaxLength=1024 | out: lpString1="69723120") returned="69723120" [0076.238] lstrlenW (lpString="69723120") returned 8 [0076.238] lstrcpynW (in: lpString1=0x46b000, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0076.238] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.238] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.238] lstrlenW (lpString="") returned 0 [0076.238] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.238] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.238] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.238] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.239] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0076.239] lstrlenW (lpString="20") returned 2 [0076.239] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0076.239] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.239] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.239] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.239] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.239] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.239] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.239] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.239] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0076.239] lstrlenW (lpString=" ") returned 1 [0076.239] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0076.239] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.239] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0076.239] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.239] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.240] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.240] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.240] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.240] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.240] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.240] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.240] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindowProcW(ir1", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1") returned="user32::CallWindowProcW(ir1" [0076.240] lstrlenW (lpString="user32::CallWindowProcW(ir1") returned 27 [0076.240] lstrcpynW (in: lpString1=0x432ed6, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0076.240] lstrlenW (lpString=" ") returned 1 [0076.240] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindowProcW(ir1 ", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ") returned="user32::CallWindowProcW(ir1 " [0076.240] lstrlenW (lpString="user32::CallWindowProcW(ir1 ") returned 28 [0076.240] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindowProcW(ir1 ", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ") returned="user32::CallWindowProcW(ir1 " [0076.240] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.241] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.241] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.241] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.241] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.241] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.241] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.241] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.242] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.242] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.242] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.242] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.242] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.242] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.242] lstrlenW (lpString="C:\\Windows") returned 10 [0076.242] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.242] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.242] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.242] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.243] lstrlenW (lpString="524386") returned 6 [0076.243] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.243] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.243] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.243] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.243] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.243] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.243] lstrlenW (lpString="6") returned 1 [0076.243] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0076.243] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0076.243] lstrlenW (lpString="8") returned 1 [0076.243] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0076.243] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0076.243] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0076.243] lstrlenW (lpString="Execute: ") returned 9 [0076.243] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0076.243] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0076.243] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0076.244] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x4f [0076.244] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x4f [0076.244] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x4f, lParam=0x0) returned 0x1 [0076.244] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0076.245] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0076.245] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0076.245] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0076.245] lstrcpynW (in: lpString1=0x432ea0, lpString2="540", iMaxLength=1024 | out: lpString1="540") returned="540" [0076.245] lstrlenW (lpString="540") returned 3 [0076.245] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="548") returned 3 [0076.245] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.245] lstrlenW (lpString="") returned 0 [0076.245] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.245] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.245] lstrcpynW (in: lpString1=0x432ea0, lpString2="548", iMaxLength=1024 | out: lpString1="548") returned="548" [0076.245] lstrlenW (lpString="548") returned 3 [0076.245] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0076.245] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0076.245] lstrcpynW (in: lpString1=0x46d000, lpString2="D9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString1="D9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned="D9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0076.245] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0076.246] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0076.246] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0076.246] RegCloseKey (hKey=0x1c0) returned 0x0 [0076.246] lstrcpynW (in: lpString1=0x432ea4, lpString2="D9E155AC", iMaxLength=1024 | out: lpString1="D9E155AC") returned="D9E155AC" [0076.246] lstrlenW (lpString="D9E155AC") returned 8 [0076.246] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="745087024") returned 9 [0076.246] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0076.246] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0076.246] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0076.246] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0076.246] RegCloseKey (hKey=0x1c0) returned 0x0 [0076.246] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0076.246] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0076.247] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0076.247] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0076.247] lstrcpynW (in: lpString1=0x432ea0, lpString2="745087024", iMaxLength=1024 | out: lpString1="745087024") returned="745087024" [0076.247] lstrlenW (lpString="745087024") returned 9 [0076.247] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="2C692030") returned 8 [0076.247] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.247] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.247] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.247] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.247] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.247] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.247] lstrlenW (lpString="0") returned 1 [0076.247] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.247] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.248] lstrlenW (lpString="0") returned 1 [0076.248] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.248] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.248] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.248] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.248] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.248] lstrlenW (lpString="0") returned 1 [0076.248] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C692030", iMaxLength=1024 | out: lpString1="2C692030") returned="2C692030" [0076.248] lstrlenW (lpString="2C692030") returned 8 [0076.248] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C692030", iMaxLength=1024 | out: lpString1="2C692030") returned="2C692030" [0076.248] lstrlenW (lpString="2C692030") returned 8 [0076.248] lstrcpynW (in: lpString1=0x46b000, lpString2="2C692030", iMaxLength=1024 | out: lpString1="2C692030") returned="2C692030" [0076.248] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.248] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.248] lstrlenW (lpString="") returned 0 [0076.248] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.248] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.248] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.248] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.248] lstrcpynW (in: lpString1=0x432ea4, lpString2="2C", iMaxLength=1024 | out: lpString1="2C") returned="2C" [0076.248] lstrlenW (lpString="2C") returned 2 [0076.248] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=",") returned 1 [0076.248] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.248] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.249] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.249] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.249] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.249] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.249] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.249] lstrcpynW (in: lpString1=0x432ea0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0076.249] lstrlenW (lpString=",") returned 1 [0076.249] lstrcpynW (in: lpString1=0x40b5f0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0076.249] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.249] lstrcmpiW (lpString1=",", lpString2="^") returned -1 [0076.249] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.249] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.249] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.249] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.250] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.250] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.250] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.250] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.250] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindowProcW(ir1 ", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ") returned="user32::CallWindowProcW(ir1 " [0076.250] lstrlenW (lpString="user32::CallWindowProcW(ir1 ") returned 28 [0076.250] lstrcpynW (in: lpString1=0x432ed8, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0076.250] lstrlenW (lpString=",") returned 1 [0076.250] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindowProcW(ir1 ,", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,") returned="user32::CallWindowProcW(ir1 ," [0076.250] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,") returned 29 [0076.250] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindowProcW(ir1 ,", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,") returned="user32::CallWindowProcW(ir1 ," [0076.250] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.250] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.250] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.250] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.251] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.251] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.251] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.251] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.251] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.251] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.251] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.251] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.251] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.252] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.252] lstrlenW (lpString="C:\\Windows") returned 10 [0076.252] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.252] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.252] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.252] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.252] lstrlenW (lpString="524386") returned 6 [0076.252] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.252] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.252] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.252] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.252] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.252] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.252] lstrlenW (lpString="0") returned 1 [0076.252] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0076.252] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.252] lstrlenW (lpString="2") returned 1 [0076.252] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.253] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.253] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.253] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.253] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.253] lstrlenW (lpString="2") returned 1 [0076.253] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C692030", iMaxLength=1024 | out: lpString1="2C692030") returned="2C692030" [0076.253] lstrlenW (lpString="2C692030") returned 8 [0076.253] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C692030", iMaxLength=1024 | out: lpString1="2C692030") returned="2C692030" [0076.253] lstrlenW (lpString="2C692030") returned 8 [0076.253] lstrcpynW (in: lpString1=0x46b000, lpString2="692030", iMaxLength=1024 | out: lpString1="692030") returned="692030" [0076.253] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.253] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.253] lstrlenW (lpString="") returned 0 [0076.253] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.253] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.253] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.253] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.253] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0076.253] lstrlenW (lpString="69") returned 2 [0076.253] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0076.253] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.253] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.253] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.254] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.254] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.254] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.254] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.254] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0076.254] lstrlenW (lpString="i") returned 1 [0076.254] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0076.254] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.254] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0076.254] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.254] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.254] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.254] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.254] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.255] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.255] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.255] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.255] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.255] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.255] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.255] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.255] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.256] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.256] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.256] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.256] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.256] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.256] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.256] lstrlenW (lpString="C:\\Windows") returned 10 [0076.256] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.256] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.256] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.256] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.256] lstrlenW (lpString="524386") returned 6 [0076.257] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.257] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.257] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.257] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.257] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.257] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.257] lstrlenW (lpString="2") returned 1 [0076.257] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0076.257] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.257] lstrlenW (lpString="4") returned 1 [0076.257] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.257] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.257] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.257] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.257] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.257] lstrlenW (lpString="4") returned 1 [0076.257] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C692030", iMaxLength=1024 | out: lpString1="2C692030") returned="2C692030" [0076.258] lstrlenW (lpString="2C692030") returned 8 [0076.258] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C692030", iMaxLength=1024 | out: lpString1="2C692030") returned="2C692030" [0076.258] lstrlenW (lpString="2C692030") returned 8 [0076.258] lstrcpynW (in: lpString1=0x46b000, lpString2="2030", iMaxLength=1024 | out: lpString1="2030") returned="2030" [0076.258] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.258] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.258] lstrlenW (lpString="") returned 0 [0076.258] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.258] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.258] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.258] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.258] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0076.258] lstrlenW (lpString="20") returned 2 [0076.258] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0076.258] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.258] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.258] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.258] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.258] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.259] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.259] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.259] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0076.259] lstrlenW (lpString=" ") returned 1 [0076.259] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0076.259] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.259] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0076.259] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.259] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.259] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.259] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.259] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.259] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.260] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.260] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.260] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindowProcW(ir1 ,i", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i") returned="user32::CallWindowProcW(ir1 ,i" [0076.261] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i") returned 30 [0076.261] lstrcpynW (in: lpString1=0x432edc, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0076.261] lstrlenW (lpString=" ") returned 1 [0076.261] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindowProcW(ir1 ,i ", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i ") returned="user32::CallWindowProcW(ir1 ,i " [0076.261] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i ") returned 31 [0076.261] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindowProcW(ir1 ,i ", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i ") returned="user32::CallWindowProcW(ir1 ,i " [0076.261] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.261] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.261] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.261] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.261] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.261] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.261] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.261] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.262] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.262] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.262] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.262] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.262] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.262] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.262] lstrlenW (lpString="C:\\Windows") returned 10 [0076.262] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.262] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.262] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.262] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.263] lstrlenW (lpString="524386") returned 6 [0076.263] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.263] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.263] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.263] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.263] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.263] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.263] lstrlenW (lpString="4") returned 1 [0076.263] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0076.263] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.263] lstrlenW (lpString="6") returned 1 [0076.263] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.263] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.263] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.263] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.263] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.263] lstrlenW (lpString="6") returned 1 [0076.263] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C692030", iMaxLength=1024 | out: lpString1="2C692030") returned="2C692030" [0076.263] lstrlenW (lpString="2C692030") returned 8 [0076.263] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C692030", iMaxLength=1024 | out: lpString1="2C692030") returned="2C692030" [0076.263] lstrlenW (lpString="2C692030") returned 8 [0076.263] lstrcpynW (in: lpString1=0x46b000, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0076.263] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.263] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.264] lstrlenW (lpString="") returned 0 [0076.264] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.264] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.264] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.264] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.264] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0076.264] lstrlenW (lpString="30") returned 2 [0076.264] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0076.264] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.264] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.264] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.264] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.264] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.264] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.264] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.264] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.264] lstrlenW (lpString="0") returned 1 [0076.264] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.264] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.265] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0076.265] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.265] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.265] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.265] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.265] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.265] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.265] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.265] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.265] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindowProcW(ir1 ,i ", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i ") returned="user32::CallWindowProcW(ir1 ,i " [0076.265] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i ") returned 31 [0076.265] lstrcpynW (in: lpString1=0x432ede, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.265] lstrlenW (lpString="0") returned 1 [0076.265] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindowProcW(ir1 ,i 0", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0") returned="user32::CallWindowProcW(ir1 ,i 0" [0076.266] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0") returned 32 [0076.266] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindowProcW(ir1 ,i 0", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0") returned="user32::CallWindowProcW(ir1 ,i 0" [0076.266] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.266] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.266] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.266] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.266] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.266] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.266] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.266] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.266] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.266] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.267] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.267] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.267] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.267] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.267] lstrlenW (lpString="C:\\Windows") returned 10 [0076.267] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.267] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.267] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.267] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.267] lstrlenW (lpString="524386") returned 6 [0076.267] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.267] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.268] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.268] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.268] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.268] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.268] lstrlenW (lpString="6") returned 1 [0076.268] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0076.268] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0076.268] lstrlenW (lpString="8") returned 1 [0076.268] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0076.268] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0076.268] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0076.268] lstrlenW (lpString="Execute: ") returned 9 [0076.268] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0076.268] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0076.268] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0076.269] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x50 [0076.269] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x50 [0076.269] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x50, lParam=0x0) returned 0x1 [0076.269] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0076.269] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0076.270] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0076.270] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0076.270] lstrcpynW (in: lpString1=0x432ea0, lpString2="548", iMaxLength=1024 | out: lpString1="548") returned="548" [0076.270] lstrlenW (lpString="548") returned 3 [0076.270] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="556") returned 3 [0076.270] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.270] lstrlenW (lpString="") returned 0 [0076.270] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.270] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.270] lstrcpynW (in: lpString1=0x432ea0, lpString2="556", iMaxLength=1024 | out: lpString1="556") returned="556" [0076.270] lstrlenW (lpString="556") returned 3 [0076.270] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0076.270] lstrlenW (lpString="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned 1023 [0076.270] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0076.270] lstrcpynW (in: lpString1=0x46d000, lpString2="D9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString1="D9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned="D9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0076.270] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0076.270] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0076.271] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0076.271] RegCloseKey (hKey=0x1c0) returned 0x0 [0076.271] lstrcpynW (in: lpString1=0x432ea4, lpString2="D9E155AC", iMaxLength=1024 | out: lpString1="D9E155AC") returned="D9E155AC" [0076.271] lstrlenW (lpString="D9E155AC") returned 8 [0076.271] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="745087024") returned 9 [0076.271] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0076.271] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0076.271] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0076.271] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0076.271] RegCloseKey (hKey=0x1c0) returned 0x0 [0076.271] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0076.271] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0076.272] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0076.272] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0076.272] lstrcpynW (in: lpString1=0x432ea0, lpString2="745087024", iMaxLength=1024 | out: lpString1="745087024") returned="745087024" [0076.272] lstrlenW (lpString="745087024") returned 9 [0076.272] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="2C692030") returned 8 [0076.272] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.272] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.272] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.272] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.273] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.273] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.273] lstrlenW (lpString="0") returned 1 [0076.273] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.273] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.273] lstrlenW (lpString="0") returned 1 [0076.273] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.273] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.273] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.273] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.273] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.273] lstrlenW (lpString="0") returned 1 [0076.273] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C692030", iMaxLength=1024 | out: lpString1="2C692030") returned="2C692030" [0076.273] lstrlenW (lpString="2C692030") returned 8 [0076.273] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C692030", iMaxLength=1024 | out: lpString1="2C692030") returned="2C692030" [0076.273] lstrlenW (lpString="2C692030") returned 8 [0076.273] lstrcpynW (in: lpString1=0x46b000, lpString2="2C692030", iMaxLength=1024 | out: lpString1="2C692030") returned="2C692030" [0076.273] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.273] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.273] lstrlenW (lpString="") returned 0 [0076.273] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.273] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.273] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.273] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.274] lstrcpynW (in: lpString1=0x432ea4, lpString2="2C", iMaxLength=1024 | out: lpString1="2C") returned="2C" [0076.274] lstrlenW (lpString="2C") returned 2 [0076.274] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=",") returned 1 [0076.274] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.274] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.274] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.274] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.274] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.274] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.274] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.274] lstrcpynW (in: lpString1=0x432ea0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0076.274] lstrlenW (lpString=",") returned 1 [0076.274] lstrcpynW (in: lpString1=0x40b5f0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0076.274] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.274] lstrcmpiW (lpString1=",", lpString2="^") returned -1 [0076.274] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.275] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.275] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.275] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.275] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.275] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.275] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.275] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.275] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindowProcW(ir1 ,i 0", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0") returned="user32::CallWindowProcW(ir1 ,i 0" [0076.275] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0") returned 32 [0076.275] lstrcpynW (in: lpString1=0x432ee0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0076.275] lstrlenW (lpString=",") returned 1 [0076.275] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindowProcW(ir1 ,i 0,", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,") returned="user32::CallWindowProcW(ir1 ,i 0," [0076.275] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0,") returned 33 [0076.275] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindowProcW(ir1 ,i 0,", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,") returned="user32::CallWindowProcW(ir1 ,i 0," [0076.276] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.276] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.276] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.276] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.276] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.276] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.276] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.276] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.276] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.276] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.277] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.277] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.277] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.277] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.277] lstrlenW (lpString="C:\\Windows") returned 10 [0076.277] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.277] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.277] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.277] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.277] lstrlenW (lpString="524386") returned 6 [0076.277] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.278] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.278] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.278] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.278] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.278] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.278] lstrlenW (lpString="0") returned 1 [0076.278] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0076.278] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.278] lstrlenW (lpString="2") returned 1 [0076.278] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.278] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.278] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.278] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.278] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.278] lstrlenW (lpString="2") returned 1 [0076.278] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C692030", iMaxLength=1024 | out: lpString1="2C692030") returned="2C692030" [0076.278] lstrlenW (lpString="2C692030") returned 8 [0076.278] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C692030", iMaxLength=1024 | out: lpString1="2C692030") returned="2C692030" [0076.278] lstrlenW (lpString="2C692030") returned 8 [0076.278] lstrcpynW (in: lpString1=0x46b000, lpString2="692030", iMaxLength=1024 | out: lpString1="692030") returned="692030" [0076.278] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.278] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.279] lstrlenW (lpString="") returned 0 [0076.279] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.279] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.279] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.279] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.279] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0076.279] lstrlenW (lpString="69") returned 2 [0076.279] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0076.279] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.279] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.279] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.279] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.279] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.279] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.279] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.279] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0076.279] lstrlenW (lpString="i") returned 1 [0076.280] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0076.280] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.280] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0076.280] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.280] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.280] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.280] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.280] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.280] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.280] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.280] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.280] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindowProcW(ir1 ,i 0,", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,") returned="user32::CallWindowProcW(ir1 ,i 0," [0076.281] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0,") returned 33 [0076.281] lstrcpynW (in: lpString1=0x432ee2, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0076.281] lstrlenW (lpString="i") returned 1 [0076.281] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindowProcW(ir1 ,i 0,i", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i") returned="user32::CallWindowProcW(ir1 ,i 0,i" [0076.281] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0,i") returned 34 [0076.281] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindowProcW(ir1 ,i 0,i", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i") returned="user32::CallWindowProcW(ir1 ,i 0,i" [0076.281] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.281] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.281] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.281] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.281] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.281] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.281] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.281] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.282] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.282] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.282] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.282] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.282] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.282] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.282] lstrlenW (lpString="C:\\Windows") returned 10 [0076.282] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.282] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.282] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.283] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.283] lstrlenW (lpString="524386") returned 6 [0076.283] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.283] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.283] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.283] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.283] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.283] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.283] lstrlenW (lpString="2") returned 1 [0076.283] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0076.283] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.283] lstrlenW (lpString="4") returned 1 [0076.283] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.283] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.283] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.283] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.283] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.283] lstrlenW (lpString="4") returned 1 [0076.283] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C692030", iMaxLength=1024 | out: lpString1="2C692030") returned="2C692030" [0076.283] lstrlenW (lpString="2C692030") returned 8 [0076.284] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C692030", iMaxLength=1024 | out: lpString1="2C692030") returned="2C692030" [0076.284] lstrlenW (lpString="2C692030") returned 8 [0076.284] lstrcpynW (in: lpString1=0x46b000, lpString2="2030", iMaxLength=1024 | out: lpString1="2030") returned="2030" [0076.284] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.284] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.284] lstrlenW (lpString="") returned 0 [0076.284] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.284] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.284] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.284] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.284] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0076.284] lstrlenW (lpString="20") returned 2 [0076.284] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0076.284] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.284] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.284] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.284] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.284] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.285] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.285] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.285] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0076.285] lstrlenW (lpString=" ") returned 1 [0076.285] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0076.285] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.285] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0076.285] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.285] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.285] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.285] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.285] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.285] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.286] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.286] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.286] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindowProcW(ir1 ,i 0,i", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i") returned="user32::CallWindowProcW(ir1 ,i 0,i" [0076.286] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0,i") returned 34 [0076.286] lstrcpynW (in: lpString1=0x432ee4, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0076.286] lstrlenW (lpString=" ") returned 1 [0076.286] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindowProcW(ir1 ,i 0,i ", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i ") returned="user32::CallWindowProcW(ir1 ,i 0,i " [0076.286] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0,i ") returned 35 [0076.286] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindowProcW(ir1 ,i 0,i ", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i ") returned="user32::CallWindowProcW(ir1 ,i 0,i " [0076.286] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.286] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.286] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.286] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.286] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.286] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.286] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.287] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.287] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.287] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.287] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.287] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.287] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.287] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.287] lstrlenW (lpString="C:\\Windows") returned 10 [0076.287] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.287] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.288] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.288] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.288] lstrlenW (lpString="524386") returned 6 [0076.288] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.288] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.288] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.288] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.288] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.288] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.288] lstrlenW (lpString="4") returned 1 [0076.288] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0076.288] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.288] lstrlenW (lpString="6") returned 1 [0076.288] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.288] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.288] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.288] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.288] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.289] lstrlenW (lpString="6") returned 1 [0076.289] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C692030", iMaxLength=1024 | out: lpString1="2C692030") returned="2C692030" [0076.289] lstrlenW (lpString="2C692030") returned 8 [0076.289] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C692030", iMaxLength=1024 | out: lpString1="2C692030") returned="2C692030" [0076.289] lstrlenW (lpString="2C692030") returned 8 [0076.289] lstrcpynW (in: lpString1=0x46b000, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0076.289] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.289] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.289] lstrlenW (lpString="") returned 0 [0076.289] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.289] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.289] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.289] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.289] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0076.289] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0076.289] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.289] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.289] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.289] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.290] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.290] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.290] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.290] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.290] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.290] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.290] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0076.290] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.290] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.290] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.290] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.290] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.290] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.291] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.291] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.291] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindowProcW(ir1 ,i 0,i ", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i ") returned="user32::CallWindowProcW(ir1 ,i 0,i " [0076.291] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0,i ") returned 35 [0076.291] lstrcpynW (in: lpString1=0x432ee6, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.291] lstrlenW (lpString="0") returned 1 [0076.291] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0") returned="user32::CallWindowProcW(ir1 ,i 0,i 0" [0076.291] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0,i 0") returned 36 [0076.291] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0") returned="user32::CallWindowProcW(ir1 ,i 0,i 0" [0076.291] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.291] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.291] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.291] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.291] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.291] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.292] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.292] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.292] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.292] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.292] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.292] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.292] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.292] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.293] lstrlenW (lpString="C:\\Windows") returned 10 [0076.293] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.293] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.293] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.293] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.293] lstrlenW (lpString="524386") returned 6 [0076.293] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.293] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.293] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.293] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.293] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.293] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.293] lstrlenW (lpString="6") returned 1 [0076.293] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0076.293] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0076.293] lstrlenW (lpString="8") returned 1 [0076.293] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0076.293] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0076.293] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0076.294] lstrlenW (lpString="Execute: ") returned 9 [0076.294] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0076.294] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0076.294] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0076.294] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x51 [0076.294] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x51 [0076.294] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x51, lParam=0x0) returned 0x1 [0076.295] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0076.295] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0076.295] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0076.295] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0076.295] lstrcpynW (in: lpString1=0x432ea0, lpString2="556", iMaxLength=1024 | out: lpString1="556") returned="556" [0076.295] lstrlenW (lpString="556") returned 3 [0076.295] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="564") returned 3 [0076.295] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.295] lstrlenW (lpString="") returned 0 [0076.295] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.295] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.295] lstrcpynW (in: lpString1=0x432ea0, lpString2="564", iMaxLength=1024 | out: lpString1="564") returned="564" [0076.295] lstrlenW (lpString="564") returned 3 [0076.296] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrlenW (lpString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returned 1023 [0076.296] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0076.296] lstrlenW (lpString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returned 1023 [0076.296] lstrcpynW (in: lpString1=0x46d000, lpString2="D9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString1="D9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned="D9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0076.296] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0076.296] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0076.296] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0076.296] RegCloseKey (hKey=0x1c0) returned 0x0 [0076.296] lstrcpynW (in: lpString1=0x432ea4, lpString2="D9A81CBC", iMaxLength=1024 | out: lpString1="D9A81CBC") returned="D9A81CBC" [0076.296] lstrlenW (lpString="D9A81CBC") returned 8 [0076.296] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="740321568") returned 9 [0076.296] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0076.296] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0076.296] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0076.296] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0076.297] RegCloseKey (hKey=0x1c0) returned 0x0 [0076.297] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0076.297] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0076.297] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0076.297] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0076.297] lstrcpynW (in: lpString1=0x432ea0, lpString2="740321568", iMaxLength=1024 | out: lpString1="740321568") returned="740321568" [0076.297] lstrlenW (lpString="740321568") returned 9 [0076.297] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="2C206920") returned 8 [0076.297] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.297] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.297] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.298] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.298] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.298] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.298] lstrlenW (lpString="0") returned 1 [0076.298] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.298] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.298] lstrlenW (lpString="0") returned 1 [0076.298] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.298] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.298] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.298] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.298] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.298] lstrlenW (lpString="0") returned 1 [0076.298] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0076.298] lstrlenW (lpString="2C206920") returned 8 [0076.298] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0076.298] lstrlenW (lpString="2C206920") returned 8 [0076.298] lstrcpynW (in: lpString1=0x46b000, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0076.298] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.298] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.298] lstrlenW (lpString="") returned 0 [0076.298] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.298] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.298] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.299] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.299] lstrcpynW (in: lpString1=0x432ea4, lpString2="2C", iMaxLength=1024 | out: lpString1="2C") returned="2C" [0076.299] lstrlenW (lpString="2C") returned 2 [0076.299] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=",") returned 1 [0076.299] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.299] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.299] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.299] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.299] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.299] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.299] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.299] lstrcpynW (in: lpString1=0x432ea0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0076.299] lstrlenW (lpString=",") returned 1 [0076.299] lstrcpynW (in: lpString1=0x40b5f0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0076.299] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.299] lstrcmpiW (lpString1=",", lpString2="^") returned -1 [0076.299] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.300] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.300] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.300] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.300] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.300] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.300] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.300] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.300] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0") returned="user32::CallWindowProcW(ir1 ,i 0,i 0" [0076.300] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0,i 0") returned 36 [0076.300] lstrcpynW (in: lpString1=0x432ee8, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0076.300] lstrlenW (lpString=",") returned 1 [0076.300] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0,", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0,") returned="user32::CallWindowProcW(ir1 ,i 0,i 0," [0076.300] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0,i 0,") returned 37 [0076.300] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0,", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0,") returned="user32::CallWindowProcW(ir1 ,i 0,i 0," [0076.300] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.301] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.301] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.301] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.301] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.301] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.301] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.301] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.301] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.301] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.301] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.301] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.302] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.302] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.302] lstrlenW (lpString="C:\\Windows") returned 10 [0076.302] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.302] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.302] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.302] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.302] lstrlenW (lpString="524386") returned 6 [0076.302] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.302] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.302] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.302] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.302] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.302] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0076.302] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.302] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.303] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.303] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.303] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.303] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0076.303] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.303] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.303] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.303] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.303] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0076.303] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.303] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.303] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.304] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.304] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.304] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.304] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.304] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.304] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0,", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0,") returned="user32::CallWindowProcW(ir1 ,i 0,i 0," [0076.304] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0,i 0,") returned 37 [0076.304] lstrcpynW (in: lpString1=0x432eea, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0076.304] lstrlenW (lpString=" ") returned 1 [0076.304] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0, ", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0, ") returned="user32::CallWindowProcW(ir1 ,i 0,i 0, " [0076.304] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0,i 0, ") returned 38 [0076.305] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0, ", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0, ") returned="user32::CallWindowProcW(ir1 ,i 0,i 0, " [0076.305] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.305] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.305] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.305] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.305] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.305] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.305] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.305] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.305] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.305] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.306] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.306] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.306] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.306] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.306] lstrlenW (lpString="C:\\Windows") returned 10 [0076.306] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.306] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.306] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.306] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.306] lstrlenW (lpString="524386") returned 6 [0076.306] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.306] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.306] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.306] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.306] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.306] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.307] lstrlenW (lpString="2") returned 1 [0076.307] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0076.307] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.307] lstrlenW (lpString="4") returned 1 [0076.307] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.307] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.307] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.307] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.307] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.307] lstrlenW (lpString="4") returned 1 [0076.307] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0076.307] lstrlenW (lpString="2C206920") returned 8 [0076.307] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0076.307] lstrlenW (lpString="2C206920") returned 8 [0076.307] lstrcpynW (in: lpString1=0x46b000, lpString2="6920", iMaxLength=1024 | out: lpString1="6920") returned="6920" [0076.307] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.307] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.307] lstrlenW (lpString="") returned 0 [0076.307] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.307] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.307] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.307] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.307] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0076.307] lstrlenW (lpString="69") returned 2 [0076.307] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0076.307] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.308] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.308] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.308] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.308] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.308] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.308] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.308] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0076.308] lstrlenW (lpString="i") returned 1 [0076.308] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0076.308] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.308] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0076.308] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.308] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.308] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.308] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.309] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.309] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.309] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.309] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.309] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0, ", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0, ") returned="user32::CallWindowProcW(ir1 ,i 0,i 0, " [0076.309] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0,i 0, ") returned 38 [0076.309] lstrcpynW (in: lpString1=0x432eec, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0076.309] lstrlenW (lpString="i") returned 1 [0076.309] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0, i", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0, i") returned="user32::CallWindowProcW(ir1 ,i 0,i 0, i" [0076.309] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0,i 0, i") returned 39 [0076.309] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0, i", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0, i") returned="user32::CallWindowProcW(ir1 ,i 0,i 0, i" [0076.309] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.309] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.309] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.309] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.310] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.310] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.310] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.310] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.310] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.310] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.310] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.310] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.310] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.310] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.311] lstrlenW (lpString="C:\\Windows") returned 10 [0076.311] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.311] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.311] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.311] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.311] lstrlenW (lpString="524386") returned 6 [0076.311] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.311] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.311] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.311] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.311] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.311] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.311] lstrlenW (lpString="4") returned 1 [0076.311] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0076.311] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.311] lstrlenW (lpString="6") returned 1 [0076.311] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.311] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.311] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.312] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.312] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.312] lstrlenW (lpString="6") returned 1 [0076.312] lstrcpynW (in: lpString1=0x432ea0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0076.312] lstrlenW (lpString="2C206920") returned 8 [0076.312] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2C206920", iMaxLength=1024 | out: lpString1="2C206920") returned="2C206920" [0076.312] lstrlenW (lpString="2C206920") returned 8 [0076.312] lstrcpynW (in: lpString1=0x46b000, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0076.312] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.312] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.312] lstrlenW (lpString="") returned 0 [0076.312] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.312] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.312] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.312] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.312] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0076.312] lstrlenW (lpString="20") returned 2 [0076.312] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0076.312] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.312] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.312] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.313] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.313] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.313] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.313] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.313] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0076.313] lstrlenW (lpString=" ") returned 1 [0076.313] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0076.313] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.313] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0076.313] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.313] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.313] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.313] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.313] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.313] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.314] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.314] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.314] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0, i", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0, i") returned="user32::CallWindowProcW(ir1 ,i 0,i 0, i" [0076.314] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0,i 0, i") returned 39 [0076.314] lstrcpynW (in: lpString1=0x432eee, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0076.314] lstrlenW (lpString=" ") returned 1 [0076.314] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0, i ", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0, i ") returned="user32::CallWindowProcW(ir1 ,i 0,i 0, i " [0076.314] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0,i 0, i ") returned 40 [0076.314] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0, i ", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0, i ") returned="user32::CallWindowProcW(ir1 ,i 0,i 0, i " [0076.314] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.314] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.314] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.314] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.314] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.314] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.315] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.315] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.315] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.315] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.315] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.315] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.315] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.315] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.315] lstrlenW (lpString="C:\\Windows") returned 10 [0076.315] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.315] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.316] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.316] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.316] lstrlenW (lpString="524386") returned 6 [0076.316] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.316] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.316] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.316] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.316] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.316] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.316] lstrlenW (lpString="6") returned 1 [0076.316] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0076.316] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0076.316] lstrlenW (lpString="8") returned 1 [0076.316] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0076.316] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0076.316] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0076.316] lstrlenW (lpString="Execute: ") returned 9 [0076.316] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0076.316] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0076.316] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0076.317] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x52 [0076.317] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x52 [0076.317] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x52, lParam=0x0) returned 0x1 [0076.318] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0076.318] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0076.318] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0076.318] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0076.318] lstrcpynW (in: lpString1=0x432ea0, lpString2="564", iMaxLength=1024 | out: lpString1="564") returned="564" [0076.318] lstrlenW (lpString="564") returned 3 [0076.318] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="572") returned 3 [0076.318] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.318] lstrlenW (lpString="") returned 0 [0076.318] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.318] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.318] lstrcpynW (in: lpString1=0x432ea0, lpString2="572", iMaxLength=1024 | out: lpString1="572") returned="572" [0076.318] lstrlenW (lpString="572") returned 3 [0076.318] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString1="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned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lstrlenW (lpString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returned 1023 [0076.318] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0076.319] lstrlenW (lpString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returned 1023 [0076.319] lstrcpynW (in: lpString1=0x46d000, lpString2="C5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString1="C5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned="C5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0076.319] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0076.319] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0076.319] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0076.319] RegCloseKey (hKey=0x1c0) returned 0x0 [0076.319] lstrcpynW (in: lpString1=0x432ea4, lpString2="C5A455F5", iMaxLength=1024 | out: lpString1="C5A455F5") returned="C5A455F5" [0076.319] lstrlenW (lpString="C5A455F5") returned 8 [0076.319] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="808198249") returned 9 [0076.319] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0076.319] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0076.319] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0076.319] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0076.320] RegCloseKey (hKey=0x1c0) returned 0x0 [0076.320] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0076.320] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0076.320] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0076.320] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0076.320] lstrcpynW (in: lpString1=0x432ea0, lpString2="808198249", iMaxLength=1024 | out: lpString1="808198249") returned="808198249" [0076.320] lstrlenW (lpString="808198249") returned 9 [0076.320] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="302C2069") returned 8 [0076.320] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.320] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.320] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.321] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.321] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.321] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.321] lstrlenW (lpString="0") returned 1 [0076.321] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.321] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.321] lstrlenW (lpString="0") returned 1 [0076.321] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.321] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.321] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.321] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.321] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.321] lstrlenW (lpString="0") returned 1 [0076.321] lstrcpynW (in: lpString1=0x432ea0, lpString2="302C2069", iMaxLength=1024 | out: lpString1="302C2069") returned="302C2069" [0076.321] lstrlenW (lpString="302C2069") returned 8 [0076.321] lstrcpynW (in: lpString1=0x40a5f0, lpString2="302C2069", iMaxLength=1024 | out: lpString1="302C2069") returned="302C2069" [0076.321] lstrlenW (lpString="302C2069") returned 8 [0076.321] lstrcpynW (in: lpString1=0x46b000, lpString2="302C2069", iMaxLength=1024 | out: lpString1="302C2069") returned="302C2069" [0076.321] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.321] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.321] lstrlenW (lpString="") returned 0 [0076.322] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.322] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.322] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.322] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.322] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0076.322] lstrlenW (lpString="30") returned 2 [0076.322] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0076.322] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.322] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.322] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.322] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.322] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.322] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.322] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.322] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.322] lstrlenW (lpString="0") returned 1 [0076.322] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.322] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.322] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0076.323] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.323] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.323] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.323] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.323] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.323] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.323] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.323] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.323] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0, i ", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0, i ") returned="user32::CallWindowProcW(ir1 ,i 0,i 0, i " [0076.323] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0,i 0, i ") returned 40 [0076.323] lstrcpynW (in: lpString1=0x432ef0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.323] lstrlenW (lpString="0") returned 1 [0076.323] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0") returned="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0" [0076.323] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0") returned 41 [0076.324] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0") returned="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0" [0076.324] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.324] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.324] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.324] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.324] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.324] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.324] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.324] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.324] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.324] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.325] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.325] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.325] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.325] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.325] lstrlenW (lpString="C:\\Windows") returned 10 [0076.325] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.325] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.325] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.325] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.325] lstrlenW (lpString="524386") returned 6 [0076.325] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.325] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.325] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.326] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.326] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.326] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.326] lstrlenW (lpString="0") returned 1 [0076.326] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0076.326] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.326] lstrlenW (lpString="2") returned 1 [0076.326] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.326] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.326] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.326] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.326] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.326] lstrlenW (lpString="2") returned 1 [0076.326] lstrcpynW (in: lpString1=0x432ea0, lpString2="302C2069", iMaxLength=1024 | out: lpString1="302C2069") returned="302C2069" [0076.326] lstrlenW (lpString="302C2069") returned 8 [0076.326] lstrcpynW (in: lpString1=0x40a5f0, lpString2="302C2069", iMaxLength=1024 | out: lpString1="302C2069") returned="302C2069" [0076.326] lstrlenW (lpString="302C2069") returned 8 [0076.326] lstrcpynW (in: lpString1=0x46b000, lpString2="2C2069", iMaxLength=1024 | out: lpString1="2C2069") returned="2C2069" [0076.326] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.326] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.326] lstrlenW (lpString="") returned 0 [0076.326] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.326] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.326] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.326] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.327] lstrcpynW (in: lpString1=0x432ea4, lpString2="2C", iMaxLength=1024 | out: lpString1="2C") returned="2C" [0076.327] lstrlenW (lpString="2C") returned 2 [0076.327] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=",") returned 1 [0076.327] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.327] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.327] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.327] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.327] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.327] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.327] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.327] lstrcpynW (in: lpString1=0x432ea0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0076.327] lstrlenW (lpString=",") returned 1 [0076.327] lstrcpynW (in: lpString1=0x40b5f0, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0076.327] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.327] lstrcmpiW (lpString1=",", lpString2="^") returned -1 [0076.327] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.327] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.328] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.328] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.328] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.328] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.328] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.328] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.328] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0") returned="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0" [0076.328] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0") returned 41 [0076.328] lstrcpynW (in: lpString1=0x432ef2, lpString2=",", iMaxLength=1024 | out: lpString1=",") returned="," [0076.328] lstrlenW (lpString=",") returned 1 [0076.328] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0,", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0,") returned="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0," [0076.328] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0,") returned 42 [0076.328] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0,", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0,") returned="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0," [0076.328] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.328] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.329] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.329] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.329] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.329] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.329] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.329] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.329] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.329] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.329] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.329] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.330] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.330] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.330] lstrlenW (lpString="C:\\Windows") returned 10 [0076.330] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.330] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.330] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.330] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.330] lstrlenW (lpString="524386") returned 6 [0076.330] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.330] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.330] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.330] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.330] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.330] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.330] lstrlenW (lpString="2") returned 1 [0076.330] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0076.330] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.331] lstrlenW (lpString="4") returned 1 [0076.331] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.331] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.331] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.331] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.331] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.331] lstrlenW (lpString="4") returned 1 [0076.331] lstrcpynW (in: lpString1=0x432ea0, lpString2="302C2069", iMaxLength=1024 | out: lpString1="302C2069") returned="302C2069" [0076.331] lstrlenW (lpString="302C2069") returned 8 [0076.331] lstrcpynW (in: lpString1=0x40a5f0, lpString2="302C2069", iMaxLength=1024 | out: lpString1="302C2069") returned="302C2069" [0076.331] lstrlenW (lpString="302C2069") returned 8 [0076.331] lstrcpynW (in: lpString1=0x46b000, lpString2="2069", iMaxLength=1024 | out: lpString1="2069") returned="2069" [0076.331] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.331] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.331] lstrlenW (lpString="") returned 0 [0076.331] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.331] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.331] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.331] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.331] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0076.331] lstrlenW (lpString="20") returned 2 [0076.331] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0076.331] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.331] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.332] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.332] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.332] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.332] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.332] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.332] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0076.332] lstrlenW (lpString=" ") returned 1 [0076.332] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0076.332] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.332] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0076.332] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.332] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.332] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.332] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.333] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.333] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.333] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.333] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.333] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0,", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0,") returned="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0," [0076.333] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0,") returned 42 [0076.333] lstrcpynW (in: lpString1=0x432ef4, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0076.333] lstrlenW (lpString=" ") returned 1 [0076.333] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, ", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, ") returned="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, " [0076.333] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, ") returned 43 [0076.333] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, ", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, ") returned="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, " [0076.333] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.333] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.333] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.333] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.334] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.334] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.334] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.334] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.334] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.334] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.334] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.334] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.334] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.334] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.335] lstrlenW (lpString="C:\\Windows") returned 10 [0076.336] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.336] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.336] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.336] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.336] lstrlenW (lpString="524386") returned 6 [0076.336] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.336] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.336] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.337] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.337] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.337] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.337] lstrlenW (lpString="4") returned 1 [0076.337] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0076.337] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.337] lstrlenW (lpString="6") returned 1 [0076.337] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.337] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.337] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.337] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.337] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.337] lstrlenW (lpString="6") returned 1 [0076.337] lstrcpynW (in: lpString1=0x432ea0, lpString2="302C2069", iMaxLength=1024 | out: lpString1="302C2069") returned="302C2069" [0076.337] lstrlenW (lpString="302C2069") returned 8 [0076.337] lstrcpynW (in: lpString1=0x40a5f0, lpString2="302C2069", iMaxLength=1024 | out: lpString1="302C2069") returned="302C2069" [0076.337] lstrlenW (lpString="302C2069") returned 8 [0076.337] lstrcpynW (in: lpString1=0x46b000, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0076.337] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.337] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.337] lstrlenW (lpString="") returned 0 [0076.337] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.337] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.337] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.338] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.338] lstrcpynW (in: lpString1=0x432ea4, lpString2="69", iMaxLength=1024 | out: lpString1="69") returned="69" [0076.338] lstrlenW (lpString="69") returned 2 [0076.338] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="i") returned 1 [0076.338] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.338] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.338] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.338] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.338] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.338] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.338] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.338] lstrcpynW (in: lpString1=0x432ea0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0076.338] lstrlenW (lpString="i") returned 1 [0076.338] lstrcpynW (in: lpString1=0x40b5f0, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0076.338] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.338] lstrcmpiW (lpString1="i", lpString2="^") returned 1 [0076.338] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.338] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.339] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.339] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.339] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.339] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.339] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.339] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.339] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, ", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, ") returned="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, " [0076.339] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, ") returned 43 [0076.339] lstrcpynW (in: lpString1=0x432ef6, lpString2="i", iMaxLength=1024 | out: lpString1="i") returned="i" [0076.339] lstrlenW (lpString="i") returned 1 [0076.339] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i") returned="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i" [0076.339] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i") returned 44 [0076.339] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i") returned="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i" [0076.339] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.340] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.340] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.340] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.340] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.340] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.340] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.340] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.340] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.340] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.340] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.340] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.341] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.341] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.341] lstrlenW (lpString="C:\\Windows") returned 10 [0076.341] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.341] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.341] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.341] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.341] lstrlenW (lpString="524386") returned 6 [0076.341] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.341] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.341] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.341] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.341] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.341] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.341] lstrlenW (lpString="6") returned 1 [0076.341] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="8") returned 1 [0076.342] lstrcpynW (in: lpString1=0x432ea0, lpString2="8", iMaxLength=1024 | out: lpString1="8") returned="8" [0076.342] lstrlenW (lpString="8") returned 1 [0076.342] SHGetFolderPathW (in: hwnd=0x80062, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x432ea2 | out: pszPath="C:\\ProgramData") returned 0x0 [0076.342] lstrcpynW (in: lpString1=0x40a5f0, lpString2="\"C:\\ProgramData\\firebases.Tro\"", iMaxLength=1024 | out: lpString1="\"C:\\ProgramData\\firebases.Tro\"") returned="\"C:\\ProgramData\\firebases.Tro\"" [0076.342] lstrcpynW (in: lpString1=0x42c248, lpString2="Execute: ", iMaxLength=1024 | out: lpString1="Execute: ") returned="Execute: " [0076.342] lstrlenW (lpString="Execute: ") returned 9 [0076.342] lstrlenW (lpString="\"C:\\ProgramData\\firebases.Tro\"") returned 30 [0076.342] lstrcatW (in: lpString1="Execute: ", lpString2="\"C:\\ProgramData\\firebases.Tro\"" | out: lpString1="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned="Execute: \"C:\\ProgramData\\firebases.Tro\"" [0076.342] SetWindowTextW (hWnd=0x20328, lpString="Execute: \"C:\\ProgramData\\firebases.Tro\"") returned 1 [0076.342] SendMessageW (hWnd=0x2031a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x53 [0076.343] SendMessageW (hWnd=0x2031a, Msg=0x104d, wParam=0x0, lParam=0x2dff93c) returned 0x53 [0076.343] SendMessageW (hWnd=0x2031a, Msg=0x1013, wParam=0x53, lParam=0x0) returned 0x1 [0076.343] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x430270*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dff960 | out: lpCommandLine="\"C:\\ProgramData\\firebases.Tro\"", lpProcessInformation=0x2dff960*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0076.343] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER" [0076.343] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Tilhyllet\\FIGURTYPERNES\\AFSYNGER", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x0) returned 0x2 [0076.343] lstrcpynW (in: lpString1=0x40bdf0, lpString2="SKIFTERETTEN", iMaxLength=1024 | out: lpString1="SKIFTERETTEN") returned="SKIFTERETTEN" [0076.343] lstrcpynW (in: lpString1=0x432ea0, lpString2="572", iMaxLength=1024 | out: lpString1="572") returned="572" [0076.343] lstrlenW (lpString="572") returned 3 [0076.344] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="580") returned 3 [0076.344] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.344] lstrlenW (lpString="") returned 0 [0076.344] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.344] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.344] lstrcpynW (in: lpString1=0x432ea0, lpString2="580", iMaxLength=1024 | out: lpString1="580") returned="580" [0076.344] lstrlenW (lpString="580") returned 3 [0076.344] lstrcpynW (in: lpString1=0x432ea0, lpString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iMaxLength=1024 | out: lpString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returned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lstrlenW (lpString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returned 1023 [0076.344] lstrcpynW (in: lpString1=0x40a5f0, lpString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iMaxLength=1024 | out: lpString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returned="BECD27D2B0C446AECFB236EE90E901F9B3E119F9B4A018BC87BC55B0D5E155AC8DB045ACC5B845ACC5A455F5D5B859BC85A845B0D5E155A8D9A81CBCC5F04DACD9A81CBCC5A11CB287BD55C2BECD27D2B0C446AECFB223F587FC00FD99C919F09AEB5DF5C5A41CBCC5F044ACC5B845ACD9A81CBCC5F046ACC5B859BC9CA845E4C1B85CECDBFA44C2BECD27D2B0C446AECFB226F981CE1CF090D81AF59BFC10EEDDE155EEC0A455F5D5B943ACC5B855B0D5E155ACD9E155ACDCE15BEEC6D6BECD27D2B0C446AECFB227F994EC33F599ED5DF587BD59BC9CA807ADD9A81CBCC5F044ACC5B845ACD9A21CBCC5A455F5D5B85CF5DBFA46C280FB10EEC6BA4FA6B6E919F0A2E11BF89AFF25EE9AEB22B49CFA44BCD9E155ACD9E155ACD9A81CBCC5A455F5D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0076.344] lstrlenW (lpString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returned 1023 [0076.344] lstrcpynW (in: lpString1=0x46d000, lpString2="D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0", iMaxLength=1024 | out: lpString1="D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0") returned="D5B85CC2CAA4DCD52BC35CF699EDF4B46E4427EB651FB0EED067714B4EDE322913DE7DB7C1B07D15D0AAC3E9170E694617DB2C9EF66D2B33C120DE1873987DE17F25C57D37ADE1A4D1AA6447E595BD973A65153FE1F96E6F1C766669F5DEE43369B374C7A8D27FD76CDDC30C565F6EA31422EA43B4CE23FF13165696DF25BD1194FDC0CA6D42D5771D7ED9CC331A02036B9CD4D3DAFB076815DCE592A0E632038CA2B0545CE632624364C55E4042FE004AA531C95639F5F1F2FC336B3ABBCE834A33F288DD12B2740FC8DCA854F997CB174FE927A7006837BEB86E650D0" [0076.344] lstrcpynW (in: lpString1=0x40b5f0, lpString2="Software\\", iMaxLength=1024 | out: lpString1="Software\\") returned="Software\\" [0076.344] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\", ulOptions=0x0, samDesired=0x20119, phkResult=0x2dff978 | out: phkResult=0x2dff978*=0x1c0) returned 0x0 [0076.344] RegEnumValueW (in: hKey=0x1c0, dwIndex=0x0, lpValueName=0x461000, lpcchValueName=0x2dffc6c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x2dffc6c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0076.344] RegCloseKey (hKey=0x1c0) returned 0x0 [0076.344] lstrcpynW (in: lpString1=0x432ea4, lpString2="D5B85CC2", iMaxLength=1024 | out: lpString1="D5B85CC2") returned="D5B85CC2" [0076.344] lstrlenW (lpString="D5B85CC2") returned 8 [0076.344] wsprintfW (in: param_1=0x46d000, param_2="%d" | out: param_1="540027230") returned 9 [0076.345] lstrcpynW (in: lpString1=0x40a5f0, lpString2="biscuitmaker", iMaxLength=1024 | out: lpString1="biscuitmaker") returned="biscuitmaker" [0076.345] lstrcpynW (in: lpString1=0x40adf0, lpString2="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", iMaxLength=1024 | out: lpString1="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week") returned="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week" [0076.345] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Frasortere\\Week", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x102, lpSecurityAttributes=0x0, phkResult=0x2dff978, lpdwDisposition=0x0 | out: phkResult=0x2dff978*=0x1c0, lpdwDisposition=0x0) returned 0x0 [0076.345] RegSetValueExW (in: hKey=0x1c0, lpValueName="biscuitmaker", Reserved=0x0, dwType=0x4, lpData=0x40b5f0*=0x0, cbData=0x4 | out: lpData=0x40b5f0*=0x0) returned 0x0 [0076.345] RegCloseKey (hKey=0x1c0) returned 0x0 [0076.345] SHGetFolderPathW (in: hwnd=0x80062, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\kEecfMwgj") returned 0x0 [0076.345] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und", iMaxLength=1024 | out: lpString1="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und") returned="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" [0076.345] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Tilewright108\\Delphinin\\Dialkyl.Und" (normalized: "c:\\users\\keecfmwgj\\tilewright108\\delphinin\\dialkyl.und"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0076.345] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%08X", iMaxLength=1024 | out: lpString1="%08X") returned="%08X" [0076.345] lstrcpynW (in: lpString1=0x432ea0, lpString2="540027230", iMaxLength=1024 | out: lpString1="540027230") returned="540027230" [0076.345] lstrlenW (lpString="540027230") returned 9 [0076.345] wsprintfW (in: param_1=0x46d000, param_2="%08X" | out: param_1="2030295E") returned 8 [0076.346] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.346] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.346] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.346] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.346] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.346] lstrcpynW (in: lpString1=0x40a5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.346] lstrlenW (lpString="0") returned 1 [0076.346] lstrcpynW (in: lpString1=0x46e000, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.346] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.346] lstrlenW (lpString="0") returned 1 [0076.346] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.346] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.346] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.346] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.346] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.346] lstrlenW (lpString="0") returned 1 [0076.346] lstrcpynW (in: lpString1=0x432ea0, lpString2="2030295E", iMaxLength=1024 | out: lpString1="2030295E") returned="2030295E" [0076.346] lstrlenW (lpString="2030295E") returned 8 [0076.346] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2030295E", iMaxLength=1024 | out: lpString1="2030295E") returned="2030295E" [0076.347] lstrlenW (lpString="2030295E") returned 8 [0076.347] lstrcpynW (in: lpString1=0x46b000, lpString2="2030295E", iMaxLength=1024 | out: lpString1="2030295E") returned="2030295E" [0076.347] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.347] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.347] lstrlenW (lpString="") returned 0 [0076.347] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.347] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.347] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.347] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.347] lstrcpynW (in: lpString1=0x432ea4, lpString2="20", iMaxLength=1024 | out: lpString1="20") returned="20" [0076.347] lstrlenW (lpString="20") returned 2 [0076.347] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=" ") returned 1 [0076.347] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.347] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.347] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.347] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.347] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.347] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.347] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.347] lstrcpynW (in: lpString1=0x432ea0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0076.348] lstrlenW (lpString=" ") returned 1 [0076.348] lstrcpynW (in: lpString1=0x40b5f0, lpString2=" ", iMaxLength=1024 | out: lpString1=" ") returned=" " [0076.348] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.348] lstrcmpiW (lpString1=" ", lpString2="^") returned -1 [0076.348] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.348] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.348] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.348] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.348] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.348] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.348] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.348] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.349] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.349] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.349] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.349] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.349] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.349] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.349] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.349] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.349] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.349] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.350] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.350] lstrlenW (lpString="C:\\Windows") returned 10 [0076.350] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.350] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.350] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.350] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.350] lstrlenW (lpString="524386") returned 6 [0076.350] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.350] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.350] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.350] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.350] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.351] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.351] lstrlenW (lpString="0") returned 1 [0076.351] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="2") returned 1 [0076.351] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.351] lstrlenW (lpString="2") returned 1 [0076.351] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.351] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.351] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.351] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.351] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.351] lstrlenW (lpString="2") returned 1 [0076.351] lstrcpynW (in: lpString1=0x432ea0, lpString2="2030295E", iMaxLength=1024 | out: lpString1="2030295E") returned="2030295E" [0076.351] lstrlenW (lpString="2030295E") returned 8 [0076.351] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2030295E", iMaxLength=1024 | out: lpString1="2030295E") returned="2030295E" [0076.351] lstrlenW (lpString="2030295E") returned 8 [0076.351] lstrcpynW (in: lpString1=0x46b000, lpString2="30295E", iMaxLength=1024 | out: lpString1="30295E") returned="30295E" [0076.351] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.351] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.351] lstrlenW (lpString="") returned 0 [0076.351] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.351] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.351] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.351] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.351] lstrcpynW (in: lpString1=0x432ea4, lpString2="30", iMaxLength=1024 | out: lpString1="30") returned="30" [0076.352] lstrlenW (lpString="30") returned 2 [0076.352] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="0") returned 1 [0076.352] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.352] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.352] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.352] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.352] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.352] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.352] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.352] lstrcpynW (in: lpString1=0x432ea0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.352] lstrlenW (lpString="0") returned 1 [0076.352] lstrcpynW (in: lpString1=0x40b5f0, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.352] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.352] lstrcmpiW (lpString1="0", lpString2="^") returned 1 [0076.352] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.352] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.352] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.353] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.353] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.353] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.353] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.353] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.353] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i ", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i ") returned="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i " [0076.353] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i ") returned 45 [0076.353] lstrcpynW (in: lpString1=0x432efa, lpString2="0", iMaxLength=1024 | out: lpString1="0") returned="0" [0076.353] lstrlenW (lpString="0") returned 1 [0076.353] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i 0", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i 0") returned="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i 0" [0076.353] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i 0") returned 46 [0076.353] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i 0", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i 0") returned="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i 0" [0076.353] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.354] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.354] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.354] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.354] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.354] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.354] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.354] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.354] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.354] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.354] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.355] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.355] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.355] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.355] lstrlenW (lpString="C:\\Windows") returned 10 [0076.355] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.355] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.355] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.355] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.355] lstrlenW (lpString="524386") returned 6 [0076.355] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.355] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.355] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.355] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.355] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.355] lstrcpynW (in: lpString1=0x432ea0, lpString2="2", iMaxLength=1024 | out: lpString1="2") returned="2" [0076.355] lstrlenW (lpString="2") returned 1 [0076.356] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="4") returned 1 [0076.356] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.356] lstrlenW (lpString="4") returned 1 [0076.356] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.356] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.356] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.356] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.356] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.356] lstrlenW (lpString="4") returned 1 [0076.356] lstrcpynW (in: lpString1=0x432ea0, lpString2="2030295E", iMaxLength=1024 | out: lpString1="2030295E") returned="2030295E" [0076.356] lstrlenW (lpString="2030295E") returned 8 [0076.356] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2030295E", iMaxLength=1024 | out: lpString1="2030295E") returned="2030295E" [0076.356] lstrlenW (lpString="2030295E") returned 8 [0076.356] lstrcpynW (in: lpString1=0x46b000, lpString2="295E", iMaxLength=1024 | out: lpString1="295E") returned="295E" [0076.356] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.356] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.356] lstrlenW (lpString="") returned 0 [0076.356] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.356] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.356] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.356] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.356] lstrcpynW (in: lpString1=0x432ea4, lpString2="29", iMaxLength=1024 | out: lpString1="29") returned="29" [0076.356] lstrlenW (lpString="29") returned 2 [0076.356] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1=")") returned 1 [0076.356] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.357] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.357] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.357] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.357] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.357] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.357] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.357] lstrcpynW (in: lpString1=0x432ea0, lpString2=")", iMaxLength=1024 | out: lpString1=")") returned=")" [0076.357] lstrlenW (lpString=")") returned 1 [0076.357] lstrcpynW (in: lpString1=0x40b5f0, lpString2=")", iMaxLength=1024 | out: lpString1=")") returned=")" [0076.357] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.357] lstrcmpiW (lpString1=")", lpString2="^") returned -1 [0076.357] SHGetFolderPathW (in: hwnd=0x80062, csidl=56, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\resources") returned 0x0 [0076.357] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", iMaxLength=1024 | out: lpString1="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed") returned="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed" [0076.357] SetFileAttributesW (lpFileName="C:\\Windows\\resources\\Medicament113\\Referencevrkerne\\trkkanalers\\Nonmetamorphoses.Zed", dwFileAttributes=0x1) returned 0 [0076.357] SHGetFolderPathW (in: hwnd=0x80062, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0076.358] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini", iMaxLength=1024 | out: lpString1="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini" [0076.358] WritePrivateProfileStringW (lpAppName=0x0, lpKeyName=0x0, lpString=0x0, lpFileName="C:\\Users\\Public\\Documents\\Beback\\Udvaskningerne\\forflyttelsespligter\\Geropiga.ini") returned 0 [0076.358] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.358] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.358] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i 0", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i 0") returned="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i 0" [0076.358] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i 0") returned 46 [0076.358] lstrcpynW (in: lpString1=0x432efc, lpString2=")", iMaxLength=1024 | out: lpString1=")") returned=")" [0076.358] lstrlenW (lpString=")") returned 1 [0076.358] lstrcpynW (in: lpString1=0x40a5f0, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i 0)", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i 0)") returned="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i 0)" [0076.358] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i 0)") returned 47 [0076.358] lstrcpynW (in: lpString1=0x46c000, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i 0)", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i 0)") returned="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i 0)" [0076.358] SHGetFolderPathW (in: hwnd=0x80062, csidl=20, hToken=0x0, dwFlags=0x0, pszPath=0x432ea0 | out: pszPath="C:\\Windows\\Fonts") returned 0x0 [0076.358] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.358] lstrcpynW (in: lpString1=0x42fa70, lpString2="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes", iMaxLength=1024 | out: lpString1="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" [0076.358] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.359] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes") returned 53 [0076.359] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.359] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147") returned 42 [0076.359] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle" (normalized: "c:\\windows\\fonts\\snuffle"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0xffffffff [0076.359] lstrlenW (lpString="C:\\Windows\\Fonts\\Snuffle") returned 24 [0076.359] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x87c438a0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x87c438a0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0x33d348 [0076.359] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.359] lstrlenW (lpString="C:\\Windows\\Fonts") returned 16 [0076.359] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x33d348 [0076.359] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.360] lstrlenW (lpString="C:\\Windows") returned 10 [0076.360] lstrcatW (in: lpString1="C:", lpString2="\\" | out: lpString1="C:\\") returned="C:\\" [0076.360] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0076.360] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\Snuffle\\Deliberationer147\\Espergrdes" (normalized: "c:\\windows\\fonts\\snuffle\\deliberationer147\\espergrdes"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb8fe0eb0, ftLastAccessTime.dwHighDateTime=0x1d87cc9, ftLastWriteTime.dwLowDateTime=0xb8fe0eb0, ftLastWriteTime.dwHighDateTime=0x1d87cc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0xffffffff [0076.360] wsprintfW (in: param_1=0x432ea0, param_2="%d" | out: param_1="524386") returned 6 [0076.360] lstrlenW (lpString="524386") returned 6 [0076.360] lstrcpynW (in: lpString1=0x40a5f0, lpString2="#32770", iMaxLength=1024 | out: lpString1="#32770") returned="#32770" [0076.360] lstrcpynW (in: lpString1=0x40adf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.360] FindWindowExW (hWndParent=0x80062, hWndChildAfter=0x0, lpszClass="#32770", lpszWindow=0x0) returned 0x3031e [0076.360] wsprintfW (in: param_1=0x45f800, param_2="%d" | out: param_1="197406") returned 6 [0076.360] wsprintfW (in: param_1=0x468000, param_2="%d" | out: param_1="256") returned 3 [0076.360] lstrcpynW (in: lpString1=0x432ea0, lpString2="4", iMaxLength=1024 | out: lpString1="4") returned="4" [0076.360] lstrlenW (lpString="4") returned 1 [0076.360] wsprintfW (in: param_1=0x46e000, param_2="%d" | out: param_1="6") returned 1 [0076.360] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.360] lstrlenW (lpString="6") returned 1 [0076.360] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%USERPROFILE%", iMaxLength=1024 | out: lpString1="%USERPROFILE%") returned="%USERPROFILE%" [0076.360] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x462000, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj") returned 0x13 [0076.360] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%APPDATA%", iMaxLength=1024 | out: lpString1="%APPDATA%") returned="%APPDATA%" [0076.360] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x461800, nSize=0x400 | out: lpDst="C:\\Users\\kEecfMwgj\\AppData\\Roaming") returned 0x23 [0076.360] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.361] lstrlenW (lpString="6") returned 1 [0076.361] lstrcpynW (in: lpString1=0x432ea0, lpString2="2030295E", iMaxLength=1024 | out: lpString1="2030295E") returned="2030295E" [0076.361] lstrlenW (lpString="2030295E") returned 8 [0076.361] lstrcpynW (in: lpString1=0x40a5f0, lpString2="2030295E", iMaxLength=1024 | out: lpString1="2030295E") returned="2030295E" [0076.361] lstrlenW (lpString="2030295E") returned 8 [0076.361] lstrcpynW (in: lpString1=0x46b000, lpString2="5E", iMaxLength=1024 | out: lpString1="5E") returned="5E" [0076.361] lstrcpynW (in: lpString1=0x469000, lpString2="Nonacceleration114", iMaxLength=1024 | out: lpString1="Nonacceleration114") returned="Nonacceleration114" [0076.361] lstrcpynW (in: lpString1=0x432ea0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.361] lstrlenW (lpString="") returned 0 [0076.361] GetDlgItem (hDlg=0x0, nIDDlgItem=13744) returned 0x0 [0076.361] wsprintfW (in: param_1=0x460000, param_2="%d" | out: param_1="0") returned 1 [0076.361] wsprintfW (in: param_1=0x468800, param_2="%d" | out: param_1="0") returned 1 [0076.361] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%c", iMaxLength=1024 | out: lpString1="%c") returned="%c" [0076.361] lstrcpynW (in: lpString1=0x432ea4, lpString2="5E", iMaxLength=1024 | out: lpString1="5E") returned="5E" [0076.361] lstrlenW (lpString="5E") returned 2 [0076.361] wsprintfW (in: param_1=0x46b000, param_2="%c" | out: param_1="^") returned 1 [0076.361] lstrcpynW (in: lpString1=0x40a5f0, lpString2="..", iMaxLength=1024 | out: lpString1="..") returned=".." [0076.361] GetFullPathNameW (in: lpFileName="..", nBufferLength=0x400, lpBuffer=0x466000, lpFilePart=0x2dffc6c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI", lpFilePart=0x2dffc6c*="SHAURI") returned 0x3b [0076.361] FindFirstFileW (in: lpFileName=".." (normalized: "c:\\users\\keecfmwgj\\videos\\betingningerne\\readjourned\\shauri"), lpFindFileData=0x4302b8 | out: lpFindFileData=0x4302b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc83ab00, ftCreationTime.dwHighDateTime=0x1d8907a, ftLastAccessTime.dwLowDateTime=0xdc83ab00, ftLastAccessTime.dwHighDateTime=0x1d8907a, ftLastWriteTime.dwLowDateTime=0xdc83ab00, ftLastWriteTime.dwHighDateTime=0x1d8907a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAURI", cAlternateFileName="")) returned 0x33d348 [0076.361] FindClose (in: hFindFile=0x33d348 | out: hFindFile=0x33d348) returned 1 [0076.361] lstrcpynW (in: lpString1=0x46606a, lpString2="SHAURI", iMaxLength=1024 | out: lpString1="SHAURI") returned="SHAURI" [0076.362] lstrcpynW (in: lpString1=0x40a5f0, lpString2="%PROGRAMFILES%", iMaxLength=1024 | out: lpString1="%PROGRAMFILES%") returned="%PROGRAMFILES%" [0076.362] ExpandEnvironmentStringsW (in: lpSrc="%PROGRAMFILES%", lpDst=0x462800, nSize=0x400 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0076.362] lstrcpynW (in: lpString1=0x432ea0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.362] lstrlenW (lpString="^") returned 1 [0076.362] lstrcpynW (in: lpString1=0x40b5f0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.362] lstrcpynW (in: lpString1=0x40bdf0, lpString2="^", iMaxLength=1024 | out: lpString1="^") returned="^" [0076.362] lstrcmpiW (lpString1="^", lpString2="^") returned 0 [0076.362] lstrcpynW (in: lpString1=0x432ea0, lpString2="580", iMaxLength=1024 | out: lpString1="580") returned="580" [0076.362] lstrlenW (lpString="580") returned 3 [0076.362] lstrcpynW (in: lpString1=0x432ea0, lpString2="6", iMaxLength=1024 | out: lpString1="6") returned="6" [0076.362] lstrlenW (lpString="6") returned 1 [0076.362] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="586") returned 3 [0076.362] lstrcpynW (in: lpString1=0x432ea0, lpString2="586", iMaxLength=1024 | out: lpString1="586") returned="586" [0076.362] lstrlenW (lpString="586") returned 3 [0076.362] wsprintfW (in: param_1=0x46b800, param_2="%d" | out: param_1="588") returned 3 [0076.362] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0076.362] lstrcpynW (in: lpString1=0x40b5f0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0076.362] lstrcpynW (in: lpString1=0x40bdf0, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.362] lstrcmpiW (lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", lpString2="") returned 1 [0076.362] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0076.362] lstrcpynW (in: lpString1=0x40bdf0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" [0076.362] lstrcpynW (in: lpString1=0x40a5f0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" [0076.363] CreateFileW (lpFileName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\nszc5ad.tmp\\system.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0xffffffff [0076.363] lstrcpynW (in: lpString1=0x42c248, lpString2="Skipped: ", iMaxLength=1024 | out: lpString1="Skipped: ") returned="Skipped: " [0076.363] lstrlenW (lpString="Skipped: ") returned 9 [0076.363] lstrlenW (lpString="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned 59 [0076.363] lstrcatW (in: lpString1="Skipped: ", lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" | out: lpString1="Skipped: C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned="Skipped: C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" [0076.363] lstrcpynW (in: lpString1=0x432ea0, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i 0)", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i 0)") returned="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i 0)" [0076.363] lstrlenW (lpString="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i 0)") returned 47 [0076.363] lstrcpynW (in: lpString1=0x33e65c, lpString2="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i 0)", iMaxLength=1024 | out: lpString1="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i 0)") returned="user32::CallWindowProcW(ir1 ,i 0,i 0, i 0, i 0)" [0076.363] lstrcpynW (in: lpString1=0x432ea0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp" [0076.363] lstrcpynW (in: lpString1=0x40adf0, lpString2="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll", iMaxLength=1024 | out: lpString1="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll" [0076.363] lstrcpynW (in: lpString1=0x40a5f0, lpString2="Call", iMaxLength=1024 | out: lpString1="Call") returned="Call" [0076.364] GetModuleHandleW (lpModuleName="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\nszC5AD.tmp\\System.dll") returned 0x74ad0000 [0076.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Call", cchWideChar=-1, lpMultiByteStr=0x2dff86c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Call", lpUsedDefaultChar=0x0) returned 5 [0076.364] GetProcAddress (hModule=0x74ad0000, lpProcName="Call") returned 0x74ad1817 [0076.364] lstrcpyW (in: lpString1=0x33f670, lpString2="user32" | out: lpString1="user32") returned="user32" [0076.364] lstrcpyW (in: lpString1=0x33fe80, lpString2="user32" | out: lpString1="user32") returned="user32" [0076.364] lstrcpyW (in: lpString1=0x340680, lpString2="CallWindowProcW" | out: lpString1="CallWindowProcW") returned="CallWindowProcW" [0076.367] GetModuleHandleW (lpModuleName="user32") returned 0x74f70000 [0076.367] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CallWindowProcW", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0076.367] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CallWindowProcW", cchWideChar=-1, lpMultiByteStr=0x339128, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CallWindowProcW", lpUsedDefaultChar=0x0) returned 16 [0076.368] GetProcAddress (hModule=0x74f70000, lpProcName="CallWindowProcW") returned 0x74f90d32 [0076.368] lstrcpynW (in: lpString1=0x33e658, lpString2="48234496", iMaxLength=1024 | out: lpString1="48234496") returned="48234496" [0076.370] lstrcpynW (in: lpString1=0x33e658, lpString2="", iMaxLength=1024 | out: lpString1="") returned="" [0076.370] CallWindowProcW (lpPrevWndFunc=0x2e00000, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) [0081.009] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0081.009] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x2dff5e8*=0x0, ZeroBits=0x0, RegionSize=0x2dff5e4*=0x81000, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0x2dff5e8*=0x2f00000, RegionSize=0x2dff5e4*=0x81000) returned 0x0 [0081.014] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0081.014] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0081.020] RtlAddVectoredExceptionHandler (FirstHandler=0x1, VectoredHandler=0x2e1467d) returned 0x339128 [0081.025] LoadLibraryA (lpLibFileName="user32") returned 0x74f70000 [0081.027] LoadLibraryA (lpLibFileName="kernel32") returned 0x75620000 [0081.031] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0081.032] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.032] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x11000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x11000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0xf000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.032] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x12000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x12000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0xe000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.032] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x13000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x13000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0xd000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.032] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x14000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x14000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0xc000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.032] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x15000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x15000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0xb000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.033] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x16000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x16000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0xa000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.033] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x17000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x17000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x9000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.033] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x18000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x18000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x8000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.033] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x19000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x19000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x7000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.033] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x1a000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x6000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.033] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x1b000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.033] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x1c000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.033] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x1d000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.034] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x1e000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.034] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x1f000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.034] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x20000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x20000, AllocationBase=0x20000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.034] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x21000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x21000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.034] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x22000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x22000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xe000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.034] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x23000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x23000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xd000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.034] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x24000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x24000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xc000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.034] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x25000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x25000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xb000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.034] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x26000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x26000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xa000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.034] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x27000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x27000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x9000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.034] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x28000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x28000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x8000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.034] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x7000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.034] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x2a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x2a000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x6000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.034] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x2b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x2b000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x5000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.035] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x2c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x2c000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.035] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x2d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x2d000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x3000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.035] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x2e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x2e000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x2000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.035] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x2f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x2f000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x1000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.035] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x30000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x30000, AllocationBase=0x30000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.035] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x31000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x31000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.035] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x32000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x32000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xe000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.035] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x33000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x33000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xd000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.035] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x34000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x34000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xc000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.035] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x35000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x35000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xb000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.035] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x36000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x36000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xa000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.035] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x37000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x37000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x9000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.035] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x38000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x38000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x8000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.035] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x39000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x39000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x7000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.035] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x3a000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x6000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.035] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x3b000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x5000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.035] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x3c000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.035] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x3d000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x3000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.035] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x3e000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x2000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.036] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x3f000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x1000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.036] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x40000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x40000, AllocationBase=0x40000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000), ResultLength=0x0) returned 0x0 [0081.036] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x41000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x41000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.036] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x42000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x42000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xe000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.036] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x43000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x43000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xd000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.036] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x44000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x44000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xc000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.036] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x45000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x45000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xb000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.036] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x46000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x46000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xa000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.036] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x47000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x47000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x9000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.036] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x48000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x48000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x8000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.036] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x49000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x49000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x7000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.036] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x4a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x4a000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x6000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.036] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x4b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x4b000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x5000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.036] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x4c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x4c000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.036] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x4d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x4d000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x3000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.036] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x4e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x4e000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x2000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.036] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x4f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x4f000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x1000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0081.037] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x50000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x50000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x37000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.037] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x51000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x51000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x36000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.037] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x52000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x52000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x35000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.037] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x53000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x53000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x34000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.037] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x54000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x54000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x33000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.037] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x55000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x55000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x32000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.037] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x56000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x56000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x31000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.037] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x57000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x57000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x30000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.037] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x58000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x58000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x2f000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.037] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x59000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x59000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x2e000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.037] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x5a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x5a000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x2d000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.037] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x5b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x5b000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x2c000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.037] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x5c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x5c000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x2b000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.037] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x5d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x5d000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x2a000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.037] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x5e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x5e000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x29000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.037] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x5f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x5f000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x28000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.037] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x60000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x60000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x27000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.037] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x61000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x61000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x26000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.037] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x62000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x62000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x25000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.038] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x63000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x63000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x24000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.038] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x64000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x64000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x23000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.038] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x65000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x65000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x22000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.038] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x66000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x66000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x21000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.038] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x67000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x67000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x20000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.038] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x68000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x68000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x1f000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.038] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x69000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x69000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x1e000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.038] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x6a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x6a000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x1d000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.038] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x6b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x6b000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x1c000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.038] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x6c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x6c000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x1b000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.038] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x6d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x6d000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x1a000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.038] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x6e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x6e000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x19000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.038] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x6f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x6f000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x18000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.038] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x70000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x70000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x17000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.038] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x71000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x71000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x16000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.038] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x72000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x72000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x15000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.038] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x73000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x73000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x14000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.038] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x74000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x74000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x13000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.039] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x75000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x75000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x12000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.039] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x76000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x76000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x11000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.039] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x77000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x77000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x10000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.039] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x78000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x78000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0xf000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.039] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x79000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x79000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0xe000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.039] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7a000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0xd000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.039] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7b000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0xc000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.039] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7c000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0xb000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.039] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7d000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0xa000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.039] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7e000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x9000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.039] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7f000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x8000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.039] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x80000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x80000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x7000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.039] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x81000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x81000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x6000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.039] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x82000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x82000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x5000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.039] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x83000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x83000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x4000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.039] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x84000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x84000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.039] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x85000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x85000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.039] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x86000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x86000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.040] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x87000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x87000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.040] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x88000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x88000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x104, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.040] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x89000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x89000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x7000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.040] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x8a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x8a000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x6000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.040] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x8b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x8b000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.040] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x8c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x8c000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.040] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x8d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x8d000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.040] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x8e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x8e000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.040] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x8f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x8f000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.040] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x90000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x90000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xfb000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.040] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x91000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x91000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xfa000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.040] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x92000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x92000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xf9000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.040] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x93000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x93000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xf8000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.041] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x94000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x94000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xf7000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.041] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x95000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x95000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xf6000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.041] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x96000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x96000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xf5000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.041] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x97000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x97000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xf4000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.041] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x98000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x98000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xf3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.041] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x99000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x99000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xf2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.041] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x9a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x9a000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xf1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.041] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x9b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x9b000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xf0000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.041] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x9c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x9c000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xef000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.041] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x9d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x9d000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xee000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.041] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x9e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x9e000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xed000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.041] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x9f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x9f000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xec000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.041] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xa0000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xeb000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.041] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xa1000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xea000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.041] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xa2000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xe9000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.041] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xa3000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xe8000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.041] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xa4000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xe7000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.041] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xa5000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xe6000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.042] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xa6000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xe5000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.042] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xa7000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xe4000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.042] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xa8000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xe3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.042] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xa9000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xe2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.042] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xaa000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xaa000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xe1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.042] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xab000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xab000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xe0000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.042] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xac000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xac000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xdf000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.042] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xad000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xad000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xde000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.042] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xae000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xae000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xdd000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.042] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xaf000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xaf000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xdc000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.042] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xb0000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xdb000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.042] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xb1000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xda000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.042] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xb2000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xd9000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.042] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xb3000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xd8000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.042] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xb4000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xd7000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.042] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xb5000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xd6000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.042] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xb6000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xd5000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.043] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xb7000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xd4000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.043] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xb8000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xd3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.043] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xb9000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xd2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.043] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xba000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xba000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xd1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.043] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xbb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xbb000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xd0000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.043] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xbc000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xbc000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xcf000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.043] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xbd000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xbd000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xce000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.043] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xbe000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xbe000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xcd000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.043] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xbf000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xbf000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xcc000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.043] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xc0000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xcb000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.043] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xc1000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xca000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.043] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xc2000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xc9000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.043] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xc3000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xc8000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.043] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xc4000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xc7000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.043] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xc5000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xc6000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.043] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xc6000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xc5000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.043] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xc7000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xc4000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.044] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xc8000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xc3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.044] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xc9000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xc2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.044] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xca000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xca000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xc1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.044] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xcb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xcb000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xc0000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.044] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xcc000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xcc000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xbf000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.044] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xcd000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xcd000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xbe000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.044] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xce000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xce000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xbd000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.044] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xcf000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xcf000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xbc000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.044] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xd0000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xbb000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.044] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xd1000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xba000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.044] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xd2000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xb9000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.044] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xd3000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xb8000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.044] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xd4000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xb7000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.044] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xd5000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xb6000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.044] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xd6000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xb5000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.044] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xd7000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xb4000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.045] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xd8000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xb3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.045] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xd9000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xb2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.045] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xda000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xda000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xb1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.045] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xdb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xdb000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xb0000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.045] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xdc000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xdc000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xaf000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.045] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xdd000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xdd000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xae000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.045] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xde000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xde000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xad000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.045] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xdf000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xdf000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xac000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.045] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xe0000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xab000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.045] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xe1000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xaa000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.045] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xe2000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xa9000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.045] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xe3000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xa8000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.045] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xe4000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xa7000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.045] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xe5000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xa6000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.045] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xe6000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xa5000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.045] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xe7000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xa4000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.045] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xe8000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xa3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.045] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xe9000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xa2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.046] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xea000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xea000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xa1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.046] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xeb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xeb000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xa0000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.046] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xec000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xec000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x9f000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.046] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xed000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xed000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x9e000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.046] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xee000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xee000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x9d000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.046] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xef000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xef000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x9c000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.046] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xf0000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x9b000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.046] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xf1000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x9a000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.046] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xf2000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x99000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.046] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xf3000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x98000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.046] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xf4000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x97000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.046] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xf5000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x96000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.046] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xf6000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x95000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.046] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xf7000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x94000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.047] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xf8000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x93000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.047] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xf9000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x92000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.047] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xfa000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xfa000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x91000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.047] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xfb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xfb000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x90000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.047] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xfc000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xfc000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x8f000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.047] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xfd000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xfd000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x8e000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.047] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xfe000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xfe000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x8d000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.047] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xff000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0xff000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x8c000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.047] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x100000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x100000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x8b000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.047] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x101000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x101000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x8a000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.047] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x102000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x102000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x89000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.047] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x103000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x103000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x88000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.047] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x104000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x104000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x87000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.047] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x105000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x105000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x86000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.047] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x106000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x106000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x85000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.047] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x107000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x107000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x84000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.047] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x108000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x108000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x83000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0081.206] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x78d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x78d000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x174000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.206] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x78e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x78e000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x173000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.206] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x78f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x78f000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x172000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.206] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x790000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x790000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x171000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.207] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x791000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x791000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x170000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.207] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x792000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x792000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x16f000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.207] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x793000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x793000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x16e000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.207] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x794000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x794000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x16d000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.207] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x795000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x795000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x16c000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.207] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x796000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x796000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x16b000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.208] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x797000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x797000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x16a000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.208] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x798000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x798000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x169000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.208] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x799000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x799000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x168000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.208] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x79a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x79a000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x167000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.208] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x79b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x79b000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x166000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.209] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x79c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x79c000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x165000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.209] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x79d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x79d000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x164000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.209] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x79e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x79e000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x163000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.209] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x79f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x79f000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x162000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.209] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7a0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7a0000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x161000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.209] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7a1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7a1000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x160000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.210] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7a2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7a2000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x15f000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.210] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7a3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7a3000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x15e000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.210] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7a4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7a4000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x15d000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.210] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7a5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7a5000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x15c000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.210] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7a6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7a6000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x15b000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.211] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7a7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7a7000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x15a000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.211] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7a8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7a8000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x159000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.211] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7a9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7a9000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x158000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.211] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7aa000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7aa000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x157000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.211] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7ab000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7ab000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x156000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.211] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7ac000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7ac000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x155000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.212] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7ad000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7ad000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x154000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.212] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7ae000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7ae000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x153000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.212] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7af000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7af000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x152000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.212] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7b0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7b0000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x151000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.212] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7b1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7b1000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x150000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.213] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7b2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7b2000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x14f000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.213] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7b3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7b3000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x14e000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.213] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7b4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7b4000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x14d000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.213] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7b5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7b5000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x14c000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.213] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7b6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7b6000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x14b000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.213] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7b7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7b7000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x14a000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.214] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7b8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7b8000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x149000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.214] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7b9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7b9000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x148000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.214] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7ba000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7ba000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x147000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.214] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7bb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7bb000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x146000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.214] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7bc000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7bc000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x145000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.215] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7bd000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7bd000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x144000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.215] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7be000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7be000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x143000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.215] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7bf000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7bf000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x142000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.215] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7c0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7c0000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x141000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.215] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7c1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7c1000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x140000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.216] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7c2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7c2000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x13f000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.216] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7c3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7c3000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x13e000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.216] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7c4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7c4000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x13d000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.216] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7c5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7c5000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x13c000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.216] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7c6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7c6000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x13b000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.216] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7c7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7c7000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x13a000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.217] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7c8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7c8000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x139000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.217] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7c9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7c9000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x138000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.217] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7ca000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7ca000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x137000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.217] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7cb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7cb000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x136000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.217] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7cc000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7cc000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x135000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.218] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7cd000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7cd000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x134000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.218] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7ce000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7ce000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x133000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.218] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7cf000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7cf000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x132000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.218] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7d0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7d0000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x131000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.218] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7d1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7d1000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x130000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.218] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7d2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7d2000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x12f000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.219] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7d3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7d3000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x12e000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.219] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7d4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7d4000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x12d000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.219] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7d5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7d5000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x12c000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.219] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7d6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7d6000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x12b000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.219] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7d7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7d7000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x12a000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.220] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7d8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7d8000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x129000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.220] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7d9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7d9000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x128000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.220] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7da000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7da000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x127000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.220] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7db000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7db000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x126000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.220] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7dc000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7dc000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x125000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.221] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7dd000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7dd000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x124000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.221] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7de000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7de000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x123000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.221] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7df000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7df000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x122000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.221] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7e0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7e0000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x121000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.221] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7e1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7e1000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x120000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.221] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7e2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7e2000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x11f000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.222] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7e3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7e3000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x11e000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.222] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7e4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7e4000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x11d000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.222] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7e5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7e5000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x11c000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.222] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7e6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7e6000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x11b000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.222] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7e7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7e7000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x11a000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.222] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7e8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7e8000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x119000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.223] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7e9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7e9000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x118000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.223] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7ea000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7ea000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x117000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.223] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7eb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7eb000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x116000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.223] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7ec000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7ec000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x115000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.223] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7ed000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7ed000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x114000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.223] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7ee000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7ee000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x113000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.224] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7ef000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7ef000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x112000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.224] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7f0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7f0000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x111000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.224] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7f1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7f1000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x110000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.224] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7f2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7f2000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x10f000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.224] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7f3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7f3000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x10e000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.224] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7f4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7f4000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x10d000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.225] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7f5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7f5000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x10c000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.225] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7f6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7f6000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x10b000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.225] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7f7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7f7000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x10a000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.225] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7f8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7f8000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x109000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.225] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7f9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7f9000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x108000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.226] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7fa000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7fa000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x107000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.226] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7fb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7fb000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x106000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.226] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7fc000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7fc000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x105000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.226] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7fd000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7fd000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x104000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.226] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7fe000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7fe000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x103000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.226] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7ff000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x7ff000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x102000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.227] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x800000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x800000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x101000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.227] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x801000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x801000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x100000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.227] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x802000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x802000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xff000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.227] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x803000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x803000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xfe000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.227] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x804000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x804000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xfd000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.227] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x805000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x805000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xfc000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.228] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x806000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x806000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xfb000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.228] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x807000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x807000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xfa000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.228] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x808000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x808000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xf9000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.228] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x809000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x809000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xf8000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.228] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x80a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x80a000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xf7000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.228] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x80b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x80b000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xf6000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.229] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x80c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x80c000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xf5000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.229] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x80d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x80d000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xf4000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.229] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x80e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x80e000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xf3000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.229] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x80f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x80f000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xf2000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.229] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x810000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x810000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xf1000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.229] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x811000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x811000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xf0000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.229] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x812000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x812000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xef000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.230] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x813000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x813000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xee000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.230] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x814000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x814000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xed000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.230] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x815000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x815000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xec000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.230] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x816000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x816000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xeb000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.230] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x817000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x817000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xea000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.230] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x818000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x818000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xe9000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.231] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x819000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x819000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xe8000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.231] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x81a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x81a000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xe7000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.231] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x81b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x81b000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xe6000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.231] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x81c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x81c000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xe5000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.231] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x81d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x81d000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xe4000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.231] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x81e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x81e000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xe3000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.232] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x81f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x81f000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xe2000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.232] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x820000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x820000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xe1000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.232] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x821000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x821000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xe0000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.232] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x822000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x822000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xdf000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.232] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x823000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x823000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xde000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.232] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x824000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x824000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xdd000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.233] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x825000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x825000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xdc000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.233] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x826000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x826000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xdb000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.233] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x827000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x827000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xda000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.233] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x828000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x828000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xd9000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.234] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x829000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x829000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xd8000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.234] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x82a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x82a000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xd7000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.234] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x82b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x82b000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xd6000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.234] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x82c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x82c000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xd5000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.234] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x82d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x82d000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xd4000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.234] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x82e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x82e000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xd3000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.235] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x82f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x82f000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xd2000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.235] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x830000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x830000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xd1000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.235] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x831000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x831000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xd0000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.235] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x832000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x832000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xcf000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.235] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x833000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x833000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xce000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.235] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x834000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x834000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xcd000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.236] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x835000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x835000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xcc000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.236] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x836000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x836000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xcb000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.236] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x837000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x837000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xca000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.236] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x838000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x838000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xc9000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.236] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x839000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x839000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xc8000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.236] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x83a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x83a000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xc7000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.237] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x83b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x83b000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xc6000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.237] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x83c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x83c000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xc5000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.237] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x83d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x83d000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xc4000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.237] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x83e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x83e000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xc3000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.237] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x83f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x83f000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xc2000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.237] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x840000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x840000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xc1000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.238] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x841000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x841000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xc0000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.238] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x842000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x842000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xbf000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.238] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x843000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x843000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xbe000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.238] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x844000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x844000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xbd000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.238] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x845000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x845000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xbc000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.238] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x846000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x846000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xbb000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.239] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x847000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x847000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xba000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.239] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x848000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x848000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xb9000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.239] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x849000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x849000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xb8000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.239] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x84a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x84a000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xb7000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.239] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x84b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x84b000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xb6000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.239] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x84c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x84c000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xb5000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.239] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x84d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x84d000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xb4000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.240] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x84e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x84e000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xb3000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.240] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x84f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x84f000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xb2000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.240] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x850000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x850000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xb1000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.240] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x851000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x851000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xb0000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.240] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x852000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x852000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xaf000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.240] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x853000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x853000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xae000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.241] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x854000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x854000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xad000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.241] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x855000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x855000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xac000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.241] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x856000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x856000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xab000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.241] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x857000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x857000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xaa000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.241] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x858000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x858000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xa9000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.241] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x859000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x859000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xa8000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.242] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x85a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x85a000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xa7000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.242] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x85b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x85b000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xa6000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.242] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x85c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x85c000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xa5000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.242] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x85d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x85d000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xa4000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.242] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x85e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x85e000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xa3000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.243] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x85f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x85f000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xa2000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.243] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x860000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x860000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xa1000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.243] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x861000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x861000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0xa0000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.243] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x862000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x862000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x9f000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.243] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x863000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x863000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x9e000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.243] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x864000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x864000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x9d000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.244] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x865000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x865000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x9c000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.244] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x866000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x866000, AllocationBase=0x780000, AllocationProtect=0x2, RegionSize=0x9b000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.766] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1d5a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x1d5a000, AllocationBase=0x1d10000, AllocationProtect=0x2, RegionSize=0x95000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.766] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1d5b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x1d5b000, AllocationBase=0x1d10000, AllocationProtect=0x2, RegionSize=0x94000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.766] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1d5c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x1d5c000, AllocationBase=0x1d10000, AllocationProtect=0x2, RegionSize=0x93000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.766] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1d5d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x1d5d000, AllocationBase=0x1d10000, AllocationProtect=0x2, RegionSize=0x92000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.812] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1d63000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x1d63000, AllocationBase=0x1d10000, AllocationProtect=0x2, RegionSize=0x8c000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.812] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1d64000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x1d64000, AllocationBase=0x1d10000, AllocationProtect=0x2, RegionSize=0x8b000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.812] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1d65000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x1d65000, AllocationBase=0x1d10000, AllocationProtect=0x2, RegionSize=0x8a000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0081.865] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1df9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x1df9000, AllocationBase=0x1df0000, AllocationProtect=0x2, RegionSize=0x2c6000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0088.865] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29dd4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29dd4000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a2c000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.865] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29dd5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29dd5000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a2b000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.865] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29dd6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29dd6000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a2a000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.865] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29dd7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29dd7000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a29000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.865] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29dd8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29dd8000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a28000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.865] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29dd9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29dd9000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a27000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.865] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29dda000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29dda000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a26000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.865] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ddb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ddb000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a25000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.865] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ddc000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ddc000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a24000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.865] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ddd000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ddd000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a23000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.865] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29dde000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29dde000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a22000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.865] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ddf000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ddf000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a21000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.865] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29de0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29de0000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a20000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.865] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29de1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29de1000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a1f000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.866] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29de2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29de2000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a1e000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.866] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29de3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29de3000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a1d000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.866] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29de4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29de4000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a1c000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.866] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29de5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29de5000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a1b000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.866] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29de6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29de6000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a1a000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.866] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29de7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29de7000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a19000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.866] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29de8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29de8000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a18000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.866] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29de9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29de9000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a17000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.866] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29dea000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29dea000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a16000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.866] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29deb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29deb000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a15000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.866] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29dec000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29dec000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a14000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.866] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ded000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ded000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a13000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.866] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29dee000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29dee000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a12000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.866] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29def000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29def000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a11000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.866] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29df0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29df0000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.866] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29df1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29df1000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a0f000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.866] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29df2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29df2000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a0e000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.866] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29df3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29df3000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a0d000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.866] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29df4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29df4000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a0c000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.867] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29df5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29df5000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a0b000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.867] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29df6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29df6000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a0a000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.867] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29df7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29df7000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a09000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.867] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29df8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29df8000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a08000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.867] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29df9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29df9000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a07000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.867] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29dfa000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29dfa000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a06000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.867] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29dfb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29dfb000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a05000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.867] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29dfc000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29dfc000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a04000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.867] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29dfd000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29dfd000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a03000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.867] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29dfe000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29dfe000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a02000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.867] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29dff000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29dff000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a01000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.867] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e00000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e00000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49a00000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.867] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e01000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e01000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499ff000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.867] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e02000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e02000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499fe000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.867] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e03000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e03000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499fd000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.867] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e04000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e04000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499fc000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.867] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e05000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e05000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499fb000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.867] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e06000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e06000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499fa000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.867] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e07000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e07000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499f9000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.867] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e08000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e08000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499f8000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.868] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e09000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e09000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499f7000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.868] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e0a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e0a000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499f6000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.868] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e0b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e0b000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499f5000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.868] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e0c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e0c000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499f4000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.868] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e0d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e0d000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499f3000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.868] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e0e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e0e000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499f2000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.868] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e0f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e0f000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499f1000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.868] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e10000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499f0000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.868] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e11000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e11000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499ef000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.868] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e12000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e12000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499ee000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.868] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e13000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e13000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499ed000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.868] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e14000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e14000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499ec000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.868] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e15000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e15000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499eb000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.868] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e16000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e16000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499ea000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.868] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e17000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e17000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499e9000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.868] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e18000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e18000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499e8000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.868] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e19000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e19000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499e7000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.868] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e1a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e1a000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499e6000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.868] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e1b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e1b000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499e5000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.869] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e1c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e1c000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499e4000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.869] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e1d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e1d000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499e3000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.869] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e1e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e1e000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499e2000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.869] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e1f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e1f000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499e1000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.869] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e20000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e20000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499e0000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.869] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e21000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e21000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499df000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.869] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e22000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e22000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499de000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.869] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e23000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e23000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499dd000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.869] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e24000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e24000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499dc000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.869] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e25000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e25000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499db000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.869] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e26000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e26000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499da000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.869] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e27000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e27000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499d9000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.869] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e28000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e28000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499d8000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.869] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e29000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e29000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499d7000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.869] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e2a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e2a000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499d6000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.869] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e2b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e2b000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499d5000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.869] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e2c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e2c000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499d4000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.869] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e2d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e2d000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499d3000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.870] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e2e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e2e000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499d2000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.870] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e2f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e2f000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499d1000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.870] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e30000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e30000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499d0000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.870] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e31000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e31000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499cf000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.870] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e32000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e32000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499ce000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.870] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e33000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e33000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499cd000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.870] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e34000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e34000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499cc000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.870] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e35000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e35000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499cb000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.870] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e36000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e36000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499ca000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.870] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e37000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e37000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499c9000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.870] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e38000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e38000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499c8000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.870] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e39000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e39000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499c7000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.870] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e3a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e3a000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499c6000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.870] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e3b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e3b000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499c5000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.870] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e3c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e3c000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499c4000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.870] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e3d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e3d000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499c3000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.870] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e3e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e3e000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499c2000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.870] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e3f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e3f000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499c1000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.871] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e40000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e40000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499c0000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.871] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e41000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e41000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499bf000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.871] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e42000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e42000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499be000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.871] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e43000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e43000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499bd000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.871] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e44000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e44000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499bc000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.871] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e45000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e45000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499bb000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.871] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e46000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e46000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499ba000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.871] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e47000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e47000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499b9000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.871] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e48000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e48000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499b8000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.871] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e49000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e49000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499b7000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.871] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e4a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e4a000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499b6000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.871] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e4b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e4b000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499b5000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.871] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e4c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e4c000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499b4000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.871] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e4d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e4d000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499b3000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.871] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e4e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e4e000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499b2000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.871] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e4f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e4f000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499b1000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.871] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e50000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e50000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499b0000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.871] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e51000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e51000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499af000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.871] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e52000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e52000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499ae000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.872] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e53000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e53000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499ad000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.872] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e54000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e54000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499ac000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.872] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e55000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e55000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499ab000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.872] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e56000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e56000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499aa000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.872] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e57000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e57000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499a9000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.872] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e58000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e58000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499a8000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.872] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e59000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e59000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499a7000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.872] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e5a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e5a000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499a6000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.872] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e5b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e5b000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499a5000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.872] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e5c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e5c000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499a4000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.872] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e5d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e5d000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499a3000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.872] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e5e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e5e000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499a2000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.872] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e5f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e5f000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499a1000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.872] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e60000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e60000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x499a0000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.872] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e61000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e61000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4999f000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.872] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e62000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e62000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4999e000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.872] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e63000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e63000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4999d000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.872] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e64000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e64000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4999c000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.873] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e65000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e65000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4999b000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.873] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e66000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e66000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4999a000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.873] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e67000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e67000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49999000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.873] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e68000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e68000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49998000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.873] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e69000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e69000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49997000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.873] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e6a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e6a000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49996000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.873] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e6b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e6b000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49995000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.873] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e6c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e6c000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49994000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.873] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e6d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e6d000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49993000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.873] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e6e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e6e000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49992000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.873] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e6f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e6f000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49991000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.873] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e70000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e70000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49990000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.873] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e71000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e71000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4998f000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.873] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e72000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e72000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4998e000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.873] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e73000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e73000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4998d000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.873] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e74000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e74000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4998c000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.873] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e75000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e75000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4998b000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.873] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e76000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e76000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4998a000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.874] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e77000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e77000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49989000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.874] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e78000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e78000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49988000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.874] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e79000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e79000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49987000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.874] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e7a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e7a000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49986000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.874] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e7b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e7b000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49985000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.874] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e7c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e7c000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49984000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.874] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e7d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e7d000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49983000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.874] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e7e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e7e000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49982000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.874] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e7f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e7f000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49981000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.874] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e80000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e80000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49980000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.874] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e81000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e81000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4997f000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.874] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e82000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e82000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4997e000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.874] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e83000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e83000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4997d000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.874] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e84000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e84000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4997c000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.874] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e85000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e85000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4997b000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.874] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e86000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e86000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4997a000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.874] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e87000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e87000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49979000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.874] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e88000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e88000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49978000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.875] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e89000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e89000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49977000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.875] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e8a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e8a000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49976000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.875] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e8b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e8b000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49975000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.875] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e8c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e8c000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49974000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.875] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e8d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e8d000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49973000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.875] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e8e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e8e000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49972000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.875] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e8f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e8f000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49971000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.875] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e90000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e90000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49970000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.875] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e91000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e91000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4996f000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.875] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e92000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e92000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4996e000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.875] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e93000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e93000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4996d000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.875] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e94000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e94000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4996c000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.875] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e95000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e95000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4996b000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.875] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e96000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e96000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4996a000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.875] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e97000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e97000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49969000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.875] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e98000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e98000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49968000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.875] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e99000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e99000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49967000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.875] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e9a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e9a000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49966000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.876] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e9b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e9b000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49965000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.876] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e9c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e9c000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49964000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.876] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e9d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e9d000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49963000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.876] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e9e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e9e000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49962000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.876] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29e9f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29e9f000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49961000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.876] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ea0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ea0000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49960000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.876] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ea1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ea1000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4995f000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.876] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ea2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ea2000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4995e000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.876] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ea3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ea3000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4995d000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.876] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ea4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ea4000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4995c000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.876] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ea5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ea5000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4995b000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.876] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ea6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ea6000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4995a000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.876] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ea7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ea7000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49959000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.876] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ea8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ea8000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49958000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.876] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ea9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ea9000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49957000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.876] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29eaa000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29eaa000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49956000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.876] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29eab000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29eab000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49955000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.876] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29eac000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29eac000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49954000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.877] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ead000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ead000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49953000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.877] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29eae000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29eae000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49952000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.877] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29eaf000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29eaf000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49951000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.877] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29eb0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29eb0000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49950000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.877] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29eb1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29eb1000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4994f000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.877] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29eb2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29eb2000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4994e000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.877] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29eb3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29eb3000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4994d000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.877] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29eb4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29eb4000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4994c000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.877] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29eb5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29eb5000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4994b000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.877] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29eb6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29eb6000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4994a000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.877] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29eb7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29eb7000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49949000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.877] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29eb8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29eb8000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49948000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.877] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29eb9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29eb9000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49947000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.877] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29eba000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29eba000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49946000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.877] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ebb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ebb000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49945000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.877] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ebc000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ebc000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49944000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.877] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ebd000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ebd000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49943000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.878] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ebe000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ebe000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49942000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.878] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ebf000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ebf000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49941000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.878] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ec0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ec0000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49940000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.878] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ec1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ec1000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4993f000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.878] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ec2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ec2000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4993e000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.878] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ec3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ec3000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4993d000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.878] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ec4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ec4000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4993c000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.878] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ec5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ec5000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4993b000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.878] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ec6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ec6000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4993a000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.878] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ec7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ec7000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49939000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.878] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ec8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ec8000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49938000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.878] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ec9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ec9000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49937000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.878] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29eca000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29eca000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49936000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.878] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ecb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ecb000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49935000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0088.878] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29ecc000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x2dff364, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x2dff364*(BaseAddress=0x29ecc000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x49934000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0104.786] LoadLibraryA (lpLibFileName="kernel32") returned 0x75620000 [0104.787] CreateFileA (lpFileName="C:\\Program Files\\Qemu-ga\\qemu-ga.exe" (normalized: "c:\\program files\\qemu-ga\\qemu-ga.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0104.788] CreateFileA (lpFileName="C:\\Program Files\\qga\\qga.exe" (normalized: "c:\\program files\\qga\\qga.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0106.585] LoadLibraryA (lpLibFileName="kernel32") returned 0x75620000 [0106.586] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0106.605] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0106.606] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0106.613] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x2dff484*=0x77160000, NumberOfBytesToProtect=0x2dff488, NewAccessProtection=0x40, OldAccessProtection=0x2dff48c | out: BaseAddress=0x2dff484*=0x77160000, NumberOfBytesToProtect=0x2dff488, OldAccessProtection=0x2dff48c*=0x20) returned 0x0 [0106.682] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x2dff484*=0x77160000, NumberOfBytesToProtect=0x2dff488, NewAccessProtection=0x20, OldAccessProtection=0x2dff48c | out: BaseAddress=0x2dff484*=0x77160000, NumberOfBytesToProtect=0x2dff488, OldAccessProtection=0x2dff48c*=0x40) returned 0x0 [0106.738] LoadLibraryA (lpLibFileName="user32") returned 0x74f70000 [0106.738] EnumWindows (lpEnumFunc=0x2e03674, lParam=0x2dff49c) returned 1 [0106.760] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0106.875] NtSetInformationThread (ThreadHandle=0xfffffffe, ThreadInformationClass=0x11, ThreadInformation=0x0, ThreadInformationLength=0x0) returned 0x0 [0106.920] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0107.016] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x2dff508*=0x0, ZeroBits=0x0, RegionSize=0x2dff504*=0x19706000, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0x2dff508*=0x2f90000, RegionSize=0x2dff504*=0x19706000) returned 0x0 [0107.098] LoadLibraryA (lpLibFileName="psapi.dll") returned 0x754e0000 [0107.243] EnumDeviceDrivers (in: lpImageBase=0x2fa1000, cb=0x8000, lpcbNeeded=0x2dff598 | out: lpImageBase=0x2fa1000*=0x2a61000, lpcbNeeded=0x2dff598) returned 1 [0107.252] LoadLibraryA (lpLibFileName="psapi.dll") returned 0x754e0000 [0107.356] GetDeviceDriverBaseNameA (in: ImageBase=0x2a61000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="ntoskrnl.exe") returned 0xc [0107.499] GetDeviceDriverBaseNameA (in: ImageBase=0x2a18000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="hal.dll") returned 0x7 [0107.616] GetDeviceDriverBaseNameA (in: ImageBase=0xba5000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="kdcom.dll") returned 0x9 [0107.762] GetDeviceDriverBaseNameA (in: ImageBase=0xc7b000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="mcupdate_GenuineIntel.dll") returned 0x19 [0107.912] GetDeviceDriverBaseNameA (in: ImageBase=0xcca000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="PSHED.dll") returned 0x9 [0108.080] GetDeviceDriverBaseNameA (in: ImageBase=0xcde000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="CLFS.SYS") returned 0x8 [0108.207] GetDeviceDriverBaseNameA (in: ImageBase=0xd3c000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="CI.dll") returned 0x6 [0108.308] GetDeviceDriverBaseNameA (in: ImageBase=0xe9c000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="Wdf01000.sys") returned 0xc [0108.408] GetDeviceDriverBaseNameA (in: ImageBase=0xf40000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="WDFLDR.SYS") returned 0xa [0108.496] GetDeviceDriverBaseNameA (in: ImageBase=0xf4f000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="ACPI.sys") returned 0x8 [0108.592] GetDeviceDriverBaseNameA (in: ImageBase=0xfa6000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="WMILIB.SYS") returned 0xa [0108.683] GetDeviceDriverBaseNameA (in: ImageBase=0xfaf000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="msisadrv.sys") returned 0xc [0108.774] GetDeviceDriverBaseNameA (in: ImageBase=0xfb9000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="pci.sys") returned 0x7 [0108.872] GetDeviceDriverBaseNameA (in: ImageBase=0xfec000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="vdrvroot.sys") returned 0xc [0108.962] GetDeviceDriverBaseNameA (in: ImageBase=0xe00000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="partmgr.sys") returned 0xb [0109.085] GetDeviceDriverBaseNameA (in: ImageBase=0xe15000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="volmgr.sys") returned 0xa [0109.187] GetDeviceDriverBaseNameA (in: ImageBase=0xe2a000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="volmgrx.sys") returned 0xb [0109.302] GetDeviceDriverBaseNameA (in: ImageBase=0xdb1000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="mountmgr.sys") returned 0xc [0109.403] GetDeviceDriverBaseNameA (in: ImageBase=0xe86000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="atapi.sys") returned 0x9 [0109.524] GetDeviceDriverBaseNameA (in: ImageBase=0xdcb000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="ataport.SYS") returned 0xb [0109.650] GetDeviceDriverBaseNameA (in: ImageBase=0xe8f000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="msahci.sys") returned 0xa [0109.775] GetDeviceDriverBaseNameA (in: ImageBase=0xc00000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="PCIIDEX.SYS") returned 0xb [0109.900] GetDeviceDriverBaseNameA (in: ImageBase=0xc10000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="amdxata.sys") returned 0xb [0110.026] GetDeviceDriverBaseNameA (in: ImageBase=0xc1b000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="fltmgr.sys") returned 0xa [0110.162] GetDeviceDriverBaseNameA (in: ImageBase=0xc67000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="fileinfo.sys") returned 0xc [0110.294] GetDeviceDriverBaseNameA (in: ImageBase=0x1008000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="Ntfs.sys") returned 0x8 [0110.434] GetDeviceDriverBaseNameA (in: ImageBase=0x1228000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="msrpc.sys") returned 0x9 [0110.563] GetDeviceDriverBaseNameA (in: ImageBase=0x1286000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="ksecdd.sys") returned 0xa [0110.688] GetDeviceDriverBaseNameA (in: ImageBase=0x12a1000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="cng.sys") returned 0x7 [0110.816] GetDeviceDriverBaseNameA (in: ImageBase=0x1313000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="pcw.sys") returned 0x7 [0110.937] GetDeviceDriverBaseNameA (in: ImageBase=0x1324000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="Fs_Rec.sys") returned 0xa [0111.061] GetDeviceDriverBaseNameA (in: ImageBase=0x1489000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="ndis.sys") returned 0x8 [0111.177] GetDeviceDriverBaseNameA (in: ImageBase=0x157c000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="NETIO.SYS") returned 0x9 [0111.278] GetDeviceDriverBaseNameA (in: ImageBase=0x1400000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="ksecpkg.sys") returned 0xb [0111.370] GetDeviceDriverBaseNameA (in: ImageBase=0x1624000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="tcpip.sys") returned 0x9 [0111.469] GetDeviceDriverBaseNameA (in: ImageBase=0x1828000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="fwpkclnt.sys") returned 0xc [0111.583] GetDeviceDriverBaseNameA (in: ImageBase=0x1872000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="vmstorfl.sys") returned 0xc [0111.697] GetDeviceDriverBaseNameA (in: ImageBase=0x1882000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="volsnap.sys") returned 0xb [0111.789] GetDeviceDriverBaseNameA (in: ImageBase=0x18ce000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="spldr.sys") returned 0x9 [0111.877] GetDeviceDriverBaseNameA (in: ImageBase=0x18d6000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="rdyboost.sys") returned 0xc [0111.964] GetDeviceDriverBaseNameA (in: ImageBase=0x1910000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="mup.sys") returned 0x7 [0112.056] GetDeviceDriverBaseNameA (in: ImageBase=0x1922000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="hwpolicy.sys") returned 0xc [0112.146] GetDeviceDriverBaseNameA (in: ImageBase=0x192b000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="fvevol.sys") returned 0xa [0112.240] GetDeviceDriverBaseNameA (in: ImageBase=0x1965000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="disk.sys") returned 0x8 [0112.329] GetDeviceDriverBaseNameA (in: ImageBase=0x197b000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="CLASSPNP.SYS") returned 0xc [0112.427] GetDeviceDriverBaseNameA (in: ImageBase=0x19e3000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="Null.SYS") returned 0x8 [0112.524] GetDeviceDriverBaseNameA (in: ImageBase=0x19ec000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="Beep.SYS") returned 0x8 [0112.618] GetDeviceDriverBaseNameA (in: ImageBase=0x1600000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="vga.sys") returned 0x7 [0112.723] GetDeviceDriverBaseNameA (in: ImageBase=0x1456000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="VIDEOPRT.SYS") returned 0xc [0112.826] GetDeviceDriverBaseNameA (in: ImageBase=0x160e000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="watchdog.sys") returned 0xc [0112.924] GetDeviceDriverBaseNameA (in: ImageBase=0x19f3000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="RDPCDD.sys") returned 0xa [0113.019] GetDeviceDriverBaseNameA (in: ImageBase=0x147b000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="rdpencdd.sys") returned 0xc [0113.111] GetDeviceDriverBaseNameA (in: ImageBase=0x15dc000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="rdprefmp.sys") returned 0xc [0113.207] GetDeviceDriverBaseNameA (in: ImageBase=0x15e5000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="Msfs.SYS") returned 0x8 [0113.323] GetDeviceDriverBaseNameA (in: ImageBase=0x142c000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="Npfs.SYS") returned 0x8 [0113.450] GetDeviceDriverBaseNameA (in: ImageBase=0x132e000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="tdx.sys") returned 0x7 [0113.571] GetDeviceDriverBaseNameA (in: ImageBase=0x143d000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="TDI.SYS") returned 0x7 [0113.665] GetDeviceDriverBaseNameA (in: ImageBase=0x1350000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="afd.sys") returned 0x7 [0113.760] GetDeviceDriverBaseNameA (in: ImageBase=0x11ab000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="netbt.sys") returned 0x9 [0113.853] GetDeviceDriverBaseNameA (in: ImageBase=0x144a000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="wfplwf.sys") returned 0xa [0113.942] GetDeviceDriverBaseNameA (in: ImageBase=0x13d9000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="pacer.sys") returned 0x9 [0114.031] GetDeviceDriverBaseNameA (in: ImageBase=0x15f0000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="netbios.sys") returned 0xb [0114.121] GetDeviceDriverBaseNameA (in: ImageBase=0x1200000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="wanarp.sys") returned 0xa [0114.211] GetDeviceDriverBaseNameA (in: ImageBase=0x3607000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="termdd.sys") returned 0xa [0114.311] GetDeviceDriverBaseNameA (in: ImageBase=0x361b000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="rdbss.sys") returned 0x9 [0114.407] GetDeviceDriverBaseNameA (in: ImageBase=0x366c000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="nsiproxy.sys") returned 0xc [0114.508] GetDeviceDriverBaseNameA (in: ImageBase=0x3678000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="mssmbios.sys") returned 0xc [0114.596] GetDeviceDriverBaseNameA (in: ImageBase=0x3683000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="discache.sys") returned 0xc [0114.684] GetDeviceDriverBaseNameA (in: ImageBase=0x3692000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="csc.sys") returned 0x7 [0114.782] GetDeviceDriverBaseNameA (in: ImageBase=0x3715000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="dfsc.sys") returned 0x8 [0114.877] GetDeviceDriverBaseNameA (in: ImageBase=0x3733000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="blbdrive.sys") returned 0xc [0114.968] GetDeviceDriverBaseNameA (in: ImageBase=0x3744000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="tunnel.sys") returned 0xa [0115.073] GetDeviceDriverBaseNameA (in: ImageBase=0x376a000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="vgapnp.sys") returned 0xa [0115.176] GetDeviceDriverBaseNameA (in: ImageBase=0x3778000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="usbehci.sys") returned 0xb [0115.280] GetDeviceDriverBaseNameA (in: ImageBase=0x3789000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="USBPORT.SYS") returned 0xb [0115.385] GetDeviceDriverBaseNameA (in: ImageBase=0x37df000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="usbuhci.sys") returned 0xb [0115.474] GetDeviceDriverBaseNameA (in: ImageBase=0x3cb1000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="HDAudBus.sys") returned 0xc [0115.579] GetDeviceDriverBaseNameA (in: ImageBase=0x3cd5000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="i8042prt.sys") returned 0xc [0115.679] GetDeviceDriverBaseNameA (in: ImageBase=0x3cf3000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="kbdclass.sys") returned 0xc [0115.795] GetDeviceDriverBaseNameA (in: ImageBase=0x3d02000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="mouclass.sys") returned 0xc [0115.891] GetDeviceDriverBaseNameA (in: ImageBase=0x3d11000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="intelppm.sys") returned 0xc [0115.977] GetDeviceDriverBaseNameA (in: ImageBase=0x3d27000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="CompositeBus.sys") returned 0x10 [0116.067] GetDeviceDriverBaseNameA (in: ImageBase=0x3d37000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="AgileVpn.sys") returned 0xc [0116.159] GetDeviceDriverBaseNameA (in: ImageBase=0x3d4d000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="rasl2tp.sys") returned 0xb [0116.262] GetDeviceDriverBaseNameA (in: ImageBase=0x3d71000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="ndistapi.sys") returned 0xc [0116.386] GetDeviceDriverBaseNameA (in: ImageBase=0x3d7d000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="ndiswan.sys") returned 0xb [0116.511] GetDeviceDriverBaseNameA (in: ImageBase=0x3dac000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="raspppoe.sys") returned 0xc [0116.631] GetDeviceDriverBaseNameA (in: ImageBase=0x3dc7000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="raspptp.sys") returned 0xb [0116.742] GetDeviceDriverBaseNameA (in: ImageBase=0x3c00000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="rassstp.sys") returned 0xb [0116.833] GetDeviceDriverBaseNameA (in: ImageBase=0x3c1a000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="rdpbus.sys") returned 0xa [0116.924] GetDeviceDriverBaseNameA (in: ImageBase=0x3c25000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="swenum.sys") returned 0xa [0117.012] GetDeviceDriverBaseNameA (in: ImageBase=0x3c27000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="ks.sys") returned 0x6 [0117.104] GetDeviceDriverBaseNameA (in: ImageBase=0x3de8000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="umbus.sys") returned 0x9 [0117.196] GetDeviceDriverBaseNameA (in: ImageBase=0x3eba000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="usbhub.sys") returned 0xa [0117.294] GetDeviceDriverBaseNameA (in: ImageBase=0x3f14000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="NDProxy.SYS") returned 0xb [0117.386] GetDeviceDriverBaseNameA (in: ImageBase=0x3f29000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="HdAudio.sys") returned 0xb [0117.507] GetDeviceDriverBaseNameA (in: ImageBase=0x3f85000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="portcls.sys") returned 0xb [0117.623] GetDeviceDriverBaseNameA (in: ImageBase=0x3fc2000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="drmk.sys") returned 0x8 [0117.730] GetDeviceDriverBaseNameA (in: ImageBase=0x3fe4000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="ksthunk.sys") returned 0xb [0117.821] GetDeviceDriverBaseNameA (in: ImageBase=0x3fea000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="crashdmp.sys") returned 0xc [0117.912] GetDeviceDriverBaseNameA (in: ImageBase=0x3e00000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="dump_dumpata.sys") returned 0x10 [0118.009] GetDeviceDriverBaseNameA (in: ImageBase=0x3e0c000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="dump_msahci.sys") returned 0xf [0118.206] GetDeviceDriverBaseNameA (in: ImageBase=0x3e17000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="dump_dumpfve.sys") returned 0x10 [0118.348] GetDeviceDriverBaseNameA (in: ImageBase=0x10000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="win32k.sys") returned 0xa [0118.480] GetDeviceDriverBaseNameA (in: ImageBase=0x3e2a000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="Dxapi.sys") returned 0x9 [0118.625] GetDeviceDriverBaseNameA (in: ImageBase=0x4e0000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="dxg.sys") returned 0x7 [0118.769] GetDeviceDriverBaseNameA (in: ImageBase=0x3e36000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="monitor.sys") returned 0xb [0118.877] GetDeviceDriverBaseNameA (in: ImageBase=0x7e0000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="TSDDD.dll") returned 0x9 [0118.972] GetDeviceDriverBaseNameA (in: ImageBase=0x3e44000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="hidusb.sys") returned 0xa [0119.074] GetDeviceDriverBaseNameA (in: ImageBase=0x3e52000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="HIDCLASS.SYS") returned 0xc [0119.166] GetDeviceDriverBaseNameA (in: ImageBase=0x3e6b000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="HIDPARSE.SYS") returned 0xc [0119.268] GetDeviceDriverBaseNameA (in: ImageBase=0x3e74000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="USBD.SYS") returned 0x8 [0119.370] GetDeviceDriverBaseNameA (in: ImageBase=0x3e76000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="kbdhid.sys") returned 0xa [0119.494] GetDeviceDriverBaseNameA (in: ImageBase=0x8a0000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="framebuf.dll") returned 0xc [0119.642] GetDeviceDriverBaseNameA (in: ImageBase=0x3e84000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="mouhid.sys") returned 0xa [0119.778] GetDeviceDriverBaseNameA (in: ImageBase=0x3e91000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="luafv.sys") returned 0x9 [0119.910] GetDeviceDriverBaseNameA (in: ImageBase=0x19ab000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="lltdio.sys") returned 0xa [0120.056] GetDeviceDriverBaseNameA (in: ImageBase=0x19c0000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="rspndr.sys") returned 0xa [0120.183] GetDeviceDriverBaseNameA (in: ImageBase=0x3076000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="HTTP.sys") returned 0x8 [0120.326] GetDeviceDriverBaseNameA (in: ImageBase=0x313f000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="bowser.sys") returned 0xa [0120.435] GetDeviceDriverBaseNameA (in: ImageBase=0x315d000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="mpsdrv.sys") returned 0xa [0120.568] GetDeviceDriverBaseNameA (in: ImageBase=0x3175000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="mrxsmb.sys") returned 0xa [0120.714] GetDeviceDriverBaseNameA (in: ImageBase=0x31a2000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="mrxsmb10.sys") returned 0xc [0120.847] GetDeviceDriverBaseNameA (in: ImageBase=0x3000000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="mrxsmb20.sys") returned 0xc [0120.975] GetDeviceDriverBaseNameA (in: ImageBase=0x4255000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="peauth.sys") returned 0xa [0121.071] GetDeviceDriverBaseNameA (in: ImageBase=0x42ff000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="secdrv.SYS") returned 0xa [0121.163] GetDeviceDriverBaseNameA (in: ImageBase=0x430a000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="srvnet.sys") returned 0xa [0121.261] GetDeviceDriverBaseNameA (in: ImageBase=0x433b000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="tcpipreg.sys") returned 0xc [0121.354] GetDeviceDriverBaseNameA (in: ImageBase=0x434d000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="srv2.sys") returned 0x8 [0121.446] GetDeviceDriverBaseNameA (in: ImageBase=0x44a9000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="srv.sys") returned 0x7 [0121.547] GetDeviceDriverBaseNameA (in: ImageBase=0x4542000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="e1q60x64.sys") returned 0xc [0121.645] GetDeviceDriverBaseNameA (in: ImageBase=0x4582000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="spsys.sys") returned 0x9 [0121.745] GetDeviceDriverBaseNameA (in: ImageBase=0x45f3000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="asyncmac.sys") returned 0xc [0121.840] GetDeviceDriverBaseNameA (in: ImageBase=0x76f70000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="ntdll.dll") returned 0x9 [0121.943] GetDeviceDriverBaseNameA (in: ImageBase=0x47a10000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="smss.exe") returned 0x8 [0122.050] GetDeviceDriverBaseNameA (in: ImageBase=0xff290000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="apisetschema.dll") returned 0x10 [0122.183] GetDeviceDriverBaseNameA (in: ImageBase=0xff020000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="autochk.exe") returned 0xb [0122.346] GetDeviceDriverBaseNameA (in: ImageBase=0xff1e0000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="clbcatq.dll") returned 0xb [0122.466] GetDeviceDriverBaseNameA (in: ImageBase=0xff140000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="msvcrt.dll") returned 0xa [0122.570] GetDeviceDriverBaseNameA (in: ImageBase=0xfef30000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="ole32.dll") returned 0x9 [0122.662] GetDeviceDriverBaseNameA (in: ImageBase=0xfee20000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="msctf.dll") returned 0x9 [0122.769] GetDeviceDriverBaseNameA (in: ImageBase=0xfebc0000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="iertutil.dll") returned 0xc [0122.874] GetDeviceDriverBaseNameA (in: ImageBase=0xfebb0000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="lpk.dll") returned 0x7 [0123.007] GetDeviceDriverBaseNameA (in: ImageBase=0xfeb60000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="ws2_32.dll") returned 0xa [0123.105] GetDeviceDriverBaseNameA (in: ImageBase=0xfeb40000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="sechost.dll") returned 0xb [0123.201] GetDeviceDriverBaseNameA (in: ImageBase=0xfeac0000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="shlwapi.dll") returned 0xb [0123.299] GetDeviceDriverBaseNameA (in: ImageBase=0xfea90000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="imm32.dll") returned 0x9 [0123.435] GetDeviceDriverBaseNameA (in: ImageBase=0x77140000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="psapi.dll") returned 0x9 [0123.570] GetDeviceDriverBaseNameA (in: ImageBase=0xfe8b0000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="setupapi.dll") returned 0xc [0123.661] GetDeviceDriverBaseNameA (in: ImageBase=0x77130000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="normaliz.dll") returned 0xc [0123.763] GetDeviceDriverBaseNameA (in: ImageBase=0xfe7e0000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="usp10.dll") returned 0x9 [0123.855] GetDeviceDriverBaseNameA (in: ImageBase=0xfe770000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="gdi32.dll") returned 0x9 [0123.944] GetDeviceDriverBaseNameA (in: ImageBase=0xfe6d0000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="comdlg32.dll") returned 0xc [0124.055] GetDeviceDriverBaseNameA (in: ImageBase=0x76e50000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="kernel32.dll") returned 0xc [0124.170] GetDeviceDriverBaseNameA (in: ImageBase=0xfe5f0000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="oleaut32.dll") returned 0xc [0124.273] GetDeviceDriverBaseNameA (in: ImageBase=0xfe4c0000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="rpcrt4.dll") returned 0xa [0124.388] GetDeviceDriverBaseNameA (in: ImageBase=0xfe340000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="urlmon.dll") returned 0xa [0124.484] GetDeviceDriverBaseNameA (in: ImageBase=0x76d50000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="user32.dll") returned 0xa [0124.589] GetDeviceDriverBaseNameA (in: ImageBase=0xfe2e0000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="Wldap32.dll") returned 0xb [0124.690] GetDeviceDriverBaseNameA (in: ImageBase=0xfe2d0000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="nsi.dll") returned 0x7 [0124.810] GetDeviceDriverBaseNameA (in: ImageBase=0xfe2b0000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="imagehlp.dll") returned 0xc [0124.940] GetDeviceDriverBaseNameA (in: ImageBase=0xfe1d0000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="advapi32.dll") returned 0xc [0125.066] GetDeviceDriverBaseNameA (in: ImageBase=0xfe0a0000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="wininet.dll") returned 0xb [0125.165] GetDeviceDriverBaseNameA (in: ImageBase=0xfd310000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="shell32.dll") returned 0xb [0125.267] GetDeviceDriverBaseNameA (in: ImageBase=0xfd290000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="difxapi.dll") returned 0xb [0125.393] GetDeviceDriverBaseNameA (in: ImageBase=0xfd270000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="devobj.dll") returned 0xa [0125.522] GetDeviceDriverBaseNameA (in: ImageBase=0xfd230000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="wintrust.dll") returned 0xc [0125.653] GetDeviceDriverBaseNameA (in: ImageBase=0xfd1c0000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="KernelBase.dll") returned 0xe [0125.795] GetDeviceDriverBaseNameA (in: ImageBase=0xfd180000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="cfgmgr32.dll") returned 0xc [0125.926] GetDeviceDriverBaseNameA (in: ImageBase=0xfd0e0000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="comctl32.dll") returned 0xc [0126.055] GetDeviceDriverBaseNameA (in: ImageBase=0xfcf70000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="crypt32.dll") returned 0xb [0126.196] GetDeviceDriverBaseNameA (in: ImageBase=0xfcf60000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="msasn1.dll") returned 0xa [0126.318] GetDeviceDriverBaseNameA (in: ImageBase=0x76910000, lpFilename=0x2fa0000, nSize=0xff | out: lpFilename="normaliz.dll") returned 0xc [0126.397] LoadLibraryA (lpLibFileName="Msi.dll") returned 0x72790000 [0127.007] LoadLibraryA (lpLibFileName="Msi.dll") returned 0x72790000 [0127.096] MsiEnumProductsA (in: iProductIndex=0x0, lpProductBuf=0x2fa0000 | out: lpProductBuf="{90160000-008C-0000-0000-0000000FF1CE}") returned 0x0 [0127.141] MsiGetProductInfoA (in: szProduct="{90160000-008C-0000-0000-0000000FF1CE}", szAttribute="Publisher", lpValueBuf=0x2fa00ff, pcchValueBuf=0x2dff598 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x2dff598) returned 0x0 [0127.215] MsiEnumProductsA (in: iProductIndex=0x1, lpProductBuf=0x2fa0000 | out: lpProductBuf="{90160000-008C-0409-0000-0000000FF1CE}") returned 0x0 [0127.256] MsiGetProductInfoA (in: szProduct="{90160000-008C-0409-0000-0000000FF1CE}", szAttribute="Publisher", lpValueBuf=0x2fa00ff, pcchValueBuf=0x2dff598 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x2dff598) returned 0xea [0127.324] MsiEnumProductsA (in: iProductIndex=0x2, lpProductBuf=0x2fa0000 | out: lpProductBuf="{90160000-008F-0000-1000-0000000FF1CE}") returned 0x0 [0127.366] MsiGetProductInfoA (in: szProduct="{90160000-008F-0000-1000-0000000FF1CE}", szAttribute="Publisher", lpValueBuf=0x2fa00ff, pcchValueBuf=0x2dff598 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x2dff598) returned 0xea [0127.435] MsiEnumProductsA (in: iProductIndex=0x3, lpProductBuf=0x2fa0000 | out: lpProductBuf="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}") returned 0x0 [0127.476] MsiGetProductInfoA (in: szProduct="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}", szAttribute="Publisher", lpValueBuf=0x2fa00ff, pcchValueBuf=0x2dff598 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x2dff598) returned 0xea [0127.547] MsiEnumProductsA (in: iProductIndex=0x4, lpProductBuf=0x2fa0000 | out: lpProductBuf="{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}") returned 0x0 [0127.589] MsiGetProductInfoA (in: szProduct="{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}", szAttribute="Publisher", lpValueBuf=0x2fa00ff, pcchValueBuf=0x2dff598 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x2dff598) returned 0xea [0127.663] MsiEnumProductsA (in: iProductIndex=0x5, lpProductBuf=0x2fa0000 | out: lpProductBuf="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}") returned 0x0 [0127.705] MsiGetProductInfoA (in: szProduct="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", szAttribute="Publisher", lpValueBuf=0x2fa00ff, pcchValueBuf=0x2dff598 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x2dff598) returned 0xea [0127.779] MsiEnumProductsA (in: iProductIndex=0x6, lpProductBuf=0x2fa0000 | out: lpProductBuf="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}") returned 0x0 [0127.826] MsiGetProductInfoA (in: szProduct="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", szAttribute="Publisher", lpValueBuf=0x2fa00ff, pcchValueBuf=0x2dff598 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x2dff598) returned 0xea [0127.898] MsiEnumProductsA (in: iProductIndex=0x7, lpProductBuf=0x2fa0000 | out: lpProductBuf="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}") returned 0x0 [0127.941] MsiGetProductInfoA (in: szProduct="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", szAttribute="Publisher", lpValueBuf=0x2fa00ff, pcchValueBuf=0x2dff598 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x2dff598) returned 0xea [0128.011] MsiEnumProductsA (in: iProductIndex=0x8, lpProductBuf=0x2fa0000 | out: lpProductBuf="{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}") returned 0x0 [0128.062] MsiGetProductInfoA (in: szProduct="{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}", szAttribute="Publisher", lpValueBuf=0x2fa00ff, pcchValueBuf=0x2dff598 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x2dff598) returned 0xea [0128.135] MsiEnumProductsA (in: iProductIndex=0x9, lpProductBuf=0x2fa0000 | out: lpProductBuf="{0FA68574-690B-4B00-89AA-B28946231449}") returned 0x0 [0128.175] MsiGetProductInfoA (in: szProduct="{0FA68574-690B-4B00-89AA-B28946231449}", szAttribute="Publisher", lpValueBuf=0x2fa00ff, pcchValueBuf=0x2dff598 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x2dff598) returned 0xea [0128.243] MsiEnumProductsA (in: iProductIndex=0xa, lpProductBuf=0x2fa0000 | out: lpProductBuf="{929FBD26-9020-399B-9A7A-751D61F0B942}") returned 0x0 [0128.282] MsiGetProductInfoA (in: szProduct="{929FBD26-9020-399B-9A7A-751D61F0B942}", szAttribute="Publisher", lpValueBuf=0x2fa00ff, pcchValueBuf=0x2dff598 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x2dff598) returned 0xea [0128.352] MsiEnumProductsA (in: iProductIndex=0xb, lpProductBuf=0x2fa0000 | out: lpProductBuf="{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}") returned 0x0 [0128.391] MsiGetProductInfoA (in: szProduct="{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}", szAttribute="Publisher", lpValueBuf=0x2fa00ff, pcchValueBuf=0x2dff598 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x2dff598) returned 0xea [0128.461] MsiEnumProductsA (in: iProductIndex=0xc, lpProductBuf=0x2fa0000 | out: lpProductBuf="{9BE518E6-ECC6-35A9-88E4-87755C07200F}") returned 0x0 [0128.504] MsiGetProductInfoA (in: szProduct="{9BE518E6-ECC6-35A9-88E4-87755C07200F}", szAttribute="Publisher", lpValueBuf=0x2fa00ff, pcchValueBuf=0x2dff598 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x2dff598) returned 0xea [0128.574] MsiEnumProductsA (in: iProductIndex=0xd, lpProductBuf=0x2fa0000 | out: lpProductBuf="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}") returned 0x0 [0128.620] MsiGetProductInfoA (in: szProduct="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}", szAttribute="Publisher", lpValueBuf=0x2fa00ff, pcchValueBuf=0x2dff598 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x2dff598) returned 0xea [0128.689] MsiEnumProductsA (in: iProductIndex=0xe, lpProductBuf=0x2fa0000 | out: lpProductBuf="{EEA66967-97E2-4561-A999-5C22E3CDE428}") returned 0x0 [0128.726] MsiGetProductInfoA (in: szProduct="{EEA66967-97E2-4561-A999-5C22E3CDE428}", szAttribute="Publisher", lpValueBuf=0x2fa00ff, pcchValueBuf=0x2dff598 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x2dff598) returned 0xea [0128.791] MsiEnumProductsA (in: iProductIndex=0xf, lpProductBuf=0x2fa0000 | out: lpProductBuf="{37B8F9C7-03FB-3253-8781-2517C99D7C00}") returned 0x0 [0128.842] MsiGetProductInfoA (in: szProduct="{37B8F9C7-03FB-3253-8781-2517C99D7C00}", szAttribute="Publisher", lpValueBuf=0x2fa00ff, pcchValueBuf=0x2dff598 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x2dff598) returned 0xea [0128.897] MsiEnumProductsA (in: iProductIndex=0x10, lpProductBuf=0x2fa0000 | out: lpProductBuf="{16735AF7-1D8D-3681-94A5-C578A61EC832}") returned 0x0 [0128.927] MsiGetProductInfoA (in: szProduct="{16735AF7-1D8D-3681-94A5-C578A61EC832}", szAttribute="Publisher", lpValueBuf=0x2fa00ff, pcchValueBuf=0x2dff598 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x2dff598) returned 0xea [0128.976] MsiEnumProductsA (in: iProductIndex=0x11, lpProductBuf=0x2fa0000 | out: lpProductBuf="{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned 0x0 [0129.004] MsiGetProductInfoA (in: szProduct="{9AC08E99-230B-47e8-9721-4577B7F124EA}", szAttribute="Publisher", lpValueBuf=0x2fa00ff, pcchValueBuf=0x2dff598 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x2dff598) returned 0x648 [0129.065] MsiEnumProductsA (in: iProductIndex=0x12, lpProductBuf=0x2fa0000 | out: lpProductBuf="{B175520C-86A2-35A7-8619-86DC379688B9}") returned 0x0 [0129.094] MsiGetProductInfoA (in: szProduct="{B175520C-86A2-35A7-8619-86DC379688B9}", szAttribute="Publisher", lpValueBuf=0x2fa00ff, pcchValueBuf=0x2dff598 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x2dff598) returned 0xea [0129.152] MsiEnumProductsA (in: iProductIndex=0x13, lpProductBuf=0x2fa0000 | out: lpProductBuf="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}") returned 0x0 [0129.182] MsiGetProductInfoA (in: szProduct="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", szAttribute="Publisher", lpValueBuf=0x2fa00ff, pcchValueBuf=0x2dff598 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x2dff598) returned 0xea [0129.231] MsiEnumProductsA (in: iProductIndex=0x14, lpProductBuf=0x2fa0000 | out: lpProductBuf="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}") returned 0x0 [0129.261] MsiGetProductInfoA (in: szProduct="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}", szAttribute="Publisher", lpValueBuf=0x2fa00ff, pcchValueBuf=0x2dff598 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x2dff598) returned 0xea [0129.341] MsiEnumProductsA (in: iProductIndex=0x15, lpProductBuf=0x2fa0000 | out: lpProductBuf="{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}") returned 0x0 [0129.391] MsiGetProductInfoA (in: szProduct="{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}", szAttribute="Publisher", lpValueBuf=0x2fa00ff, pcchValueBuf=0x2dff598 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x2dff598) returned 0xea [0129.451] MsiEnumProductsA (in: iProductIndex=0x16, lpProductBuf=0x2fa0000 | out: lpProductBuf="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}") returned 0x0 [0129.482] MsiGetProductInfoA (in: szProduct="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", szAttribute="Publisher", lpValueBuf=0x2fa00ff, pcchValueBuf=0x2dff598 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x2dff598) returned 0xea [0129.547] MsiEnumProductsA (in: iProductIndex=0x17, lpProductBuf=0x2fa0000 | out: lpProductBuf="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}") returned 0x103 [0129.581] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0129.586] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0129.603] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0129.612] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0129.624] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0129.629] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0129.635] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0129.644] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0129.657] LoadLibraryA (lpLibFileName="kernel32") returned 0x75620000 [0129.666] LoadLibraryA (lpLibFileName="kernel32") returned 0x75620000 [0129.677] LoadLibraryA (lpLibFileName="kernel32") returned 0x75620000 [0129.688] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0129.701] LoadLibraryA (lpLibFileName="kernel32") returned 0x75620000 [0129.706] LoadLibraryA (lpLibFileName="kernel32") returned 0x75620000 [0129.710] LoadLibraryA (lpLibFileName="kernel32") returned 0x75620000 [0129.715] LoadLibraryA (lpLibFileName="kernel32") returned 0x75620000 [0129.719] LoadLibraryA (lpLibFileName="kernel32") returned 0x75620000 [0129.731] LoadLibraryA (lpLibFileName="kernel32") returned 0x75620000 [0129.736] LoadLibraryA (lpLibFileName="kernel32") returned 0x75620000 [0129.758] LoadLibraryA (lpLibFileName="shell32") returned 0x75730000 [0129.762] LoadLibraryA (lpLibFileName="shell32") returned 0x75730000 [0129.788] LoadLibraryA (lpLibFileName="advapi32") returned 0x767e0000 [0129.799] LoadLibraryA (lpLibFileName="advapi32") returned 0x767e0000 [0129.837] LoadLibraryA (lpLibFileName="advapi32") returned 0x767e0000 [0129.889] OpenSCManagerA (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x3442e8 [0129.907] LoadLibraryA (lpLibFileName="advapi32") returned 0x767e0000 [0129.917] EnumServicesStatusA (in: hSCManager=0x3442e8, dwServiceType=0x30, dwServiceState=0x3, lpServices=0x2fa000c, cbBufSize=0x3e800, pcbBytesNeeded=0x2fa0008, lpServicesReturned=0x2fa0004, lpResumeHandle=0x2fa0000 | out: lpServices=0x2fa000c*(lpServiceName="AeLookupSvc", lpDisplayName="Application Experience", ServiceStatus.dwServiceType=0x20, ServiceStatus.dwCurrentState=0x1, ServiceStatus.dwControlsAccepted=0x0, ServiceStatus.dwWin32ExitCode=0x435, ServiceStatus.dwServiceSpecificExitCode=0x0, ServiceStatus.dwCheckPoint=0x0, ServiceStatus.dwWaitHint=0x0), pcbBytesNeeded=0x2fa0008, lpServicesReturned=0x2fa0004, lpResumeHandle=0x2fa0000) returned 1 [0129.940] LoadLibraryA (lpLibFileName="advapi32") returned 0x767e0000 [0129.945] CloseServiceHandle (hSCObject=0x3442e8) returned 1 [0129.955] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0130.193] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0130.193] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0130.197] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x2dff480*=0x77160000, NumberOfBytesToProtect=0x2dff484, NewAccessProtection=0x40, OldAccessProtection=0x2dff488 | out: BaseAddress=0x2dff480*=0x77160000, NumberOfBytesToProtect=0x2dff484, OldAccessProtection=0x2dff488*=0x20) returned 0x0 [0130.211] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x2dff480*=0x77160000, NumberOfBytesToProtect=0x2dff484, NewAccessProtection=0x20, OldAccessProtection=0x2dff488 | out: BaseAddress=0x2dff480*=0x77160000, NumberOfBytesToProtect=0x2dff484, OldAccessProtection=0x2dff488*=0x40) returned 0x0 [0130.411] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Users\\kEecfMwgj\\Desktop\\e7ee8ff4872d57b2fba736ee6556e3f92a3fc1c3c8738c50cc8b1e6acbb4379f.exe", lpCommandLine="\"C:\\Users\\kEecfMwgj\\Desktop\\e7ee8ff4872d57b2fba736ee6556e3f92a3fc1c3c8738c50cc8b1e6acbb4379f.exe\" ", lpProcessAttributes=0x2f90000, lpThreadAttributes=0x2f90000, bInheritHandles=0, dwCreationFlags=0x4, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x2f90400*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2f90800, hNewToken=0x0 | out: lpProcessInformation=0x2f90800*(hProcess=0x1fc, hThread=0x1f8, dwProcessId=0xfe8, dwThreadId=0xfec), hNewToken=0x0) returned 1 [0130.457] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0130.474] NtUnmapViewOfSection (ProcessHandle=0x1fc, BaseAddress=0x400000) returned 0x0 [0130.732] NtOpenFile (in: FileHandle=0x2dff5ac, DesiredAccess=0x1, ObjectAttributes=0x2f91420*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Windows\\syswow64\\mshtml.dll" (normalized: "c:\\windows\\syswow64\\mshtml.dll"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x2f91400, ShareAccess=0x1, OpenOptions=0x0 | out: FileHandle=0x2dff5ac*=0x160, IoStatusBlock=0x2f91400*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0130.864] NtCreateSection (in: SectionHandle=0x2dff5a8, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x1000000, FileHandle=0x160 | out: SectionHandle=0x2dff5a8*=0x164) returned 0x0 [0131.086] NtMapViewOfSection (in: SectionHandle=0x164, ProcessHandle=0x1fc, BaseAddress=0x2dff5a4*=0x400000, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x2dff5a0*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x2dff5a4*=0x400000, SectionOffset=0x0, ViewSize=0x2dff5a0*=0x5b7000) returned 0x40000003 [0131.269] NtAllocateVirtualMemory (in: ProcessHandle=0x1fc, BaseAddress=0x2dff5a4*=0x0, ZeroBits=0x0, RegionSize=0x2dff5a0*=0x100000, AllocationType=0x1000, Protect=0x40 | out: BaseAddress=0x2dff5a4*=0x1b0000, RegionSize=0x2dff5a0*=0x100000) returned 0x0 [0132.670] NtGetContextThread (in: ThreadHandle=0x1f8, Context=0x2f94100 | out: Context=0x2f94100*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x40352d, Ebp=0x0, Eip=0x771601c4, SegCs=0x23, EFlags=0x202, Esp=0x18fff0, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0132.686] NtSetContextThread (ThreadHandle=0x1f8, Context=0x2f94100*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x40352d, Ebp=0x0, Eip=0x1b0000, SegCs=0x23, EFlags=0x202, Esp=0x18fff0, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0132.692] NtResumeThread (in: ThreadHandle=0x1f8, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0132.767] WaitForSingleObject (hHandle=0x1f8, dwMilliseconds=0xffff) returned 0x102 [0146.153] TerminateProcess (hProcess=0xffffffff, uExitCode=0x0) Thread: id = 5 os_tid = 0xfe4 Process: id = "2" image_name = "e7ee8ff4872d57b2fba736ee6556e3f92a3fc1c3c8738c50cc8b1e6acbb4379f.exe" filename = "c:\\users\\keecfmwgj\\desktop\\e7ee8ff4872d57b2fba736ee6556e3f92a3fc1c3c8738c50cc8b1e6acbb4379f.exe" page_root = "0x40481000" os_pid = "0xfe8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xf98" cmd_line = "\"C:\\Users\\kEecfMwgj\\Desktop\\e7ee8ff4872d57b2fba736ee6556e3f92a3fc1c3c8738c50cc8b1e6acbb4379f.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Videos\\Betingningerne\\Readjourned\\SHAURI\\Ld7\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f2de" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 376 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 377 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 378 start_va = 0x40000 end_va = 0x40fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 379 start_va = 0x50000 end_va = 0x8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 380 start_va = 0x90000 end_va = 0x18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 381 start_va = 0x190000 end_va = 0x193fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 382 start_va = 0x1a0000 end_va = 0x1a1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 383 start_va = 0x76f70000 end_va = 0x77118fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 384 start_va = 0x77150000 end_va = 0x772cffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 385 start_va = 0x7efb0000 end_va = 0x7efd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 386 start_va = 0x7efdb000 end_va = 0x7efddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 387 start_va = 0x7efde000 end_va = 0x7efdefff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 388 start_va = 0x7efdf000 end_va = 0x7efdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 389 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 390 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 391 start_va = 0x7fff0000 end_va = 0x7fffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 392 start_va = 0x1b0000 end_va = 0x2affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 393 start_va = 0x400000 end_va = 0x9b6fff monitored = 0 entry_point = 0x40bffb region_type = mapped_file name = "mshtml.dll" filename = "\\Windows\\SysWOW64\\mshtml.dll" (normalized: "c:\\windows\\syswow64\\mshtml.dll") Region: id = 394 start_va = 0x380000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000380000" filename = "" Region: id = 395 start_va = 0x749d0000 end_va = 0x749d7fff monitored = 0 entry_point = 0x749d20f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 396 start_va = 0x749e0000 end_va = 0x74a3bfff monitored = 0 entry_point = 0x74a1f9f4 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 397 start_va = 0x74a40000 end_va = 0x74a7efff monitored = 0 entry_point = 0x74a6e088 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 398 start_va = 0x76e50000 end_va = 0x76f6efff monitored = 0 entry_point = 0x76e65340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 399 start_va = 0x75620000 end_va = 0x7572ffff monitored = 0 entry_point = 0x75633283 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 400 start_va = 0x76e50000 end_va = 0x76f6efff monitored = 0 entry_point = 0x76e65340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 401 start_va = 0x76e50000 end_va = 0x76f6efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000076e50000" filename = "" Region: id = 402 start_va = 0x76d50000 end_va = 0x76e49fff monitored = 0 entry_point = 0x76d6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 403 start_va = 0x76d50000 end_va = 0x76e49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000076d50000" filename = "" Region: id = 404 start_va = 0x9c0000 end_va = 0xb8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000009c0000" filename = "" Region: id = 405 start_va = 0x75620000 end_va = 0x7572ffff monitored = 0 entry_point = 0x75633283 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 406 start_va = 0x74dc0000 end_va = 0x74e06fff monitored = 0 entry_point = 0x74dc74c1 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 407 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 408 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 409 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 410 start_va = 0x2b0000 end_va = 0x316fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 411 start_va = 0x752c0000 end_va = 0x7536bfff monitored = 0 entry_point = 0x752ca472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 412 start_va = 0x754e0000 end_va = 0x754e4fff monitored = 0 entry_point = 0x754e1438 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 413 start_va = 0x76ae0000 end_va = 0x76b6ffff monitored = 0 entry_point = 0x76af6343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 414 start_va = 0x74f70000 end_va = 0x7506ffff monitored = 0 entry_point = 0x74f8b6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 415 start_va = 0x767e0000 end_va = 0x7687ffff monitored = 0 entry_point = 0x767f49e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 416 start_va = 0x74e10000 end_va = 0x74e28fff monitored = 0 entry_point = 0x74e14975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 417 start_va = 0x76450000 end_va = 0x7653ffff monitored = 0 entry_point = 0x76460569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 418 start_va = 0x74ca0000 end_va = 0x74cfffff monitored = 0 entry_point = 0x74cba3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 419 start_va = 0x74c90000 end_va = 0x74c9bfff monitored = 0 entry_point = 0x74c910e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 420 start_va = 0x77120000 end_va = 0x77129fff monitored = 0 entry_point = 0x771236a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 421 start_va = 0x76740000 end_va = 0x767dcfff monitored = 0 entry_point = 0x76773fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 422 start_va = 0x75370000 end_va = 0x754cbfff monitored = 0 entry_point = 0x753bba3d region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 423 start_va = 0x74e30000 end_va = 0x74f65fff monitored = 0 entry_point = 0x74e31b35 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 424 start_va = 0x76b70000 end_va = 0x76c64fff monitored = 0 entry_point = 0x76b71865 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 425 start_va = 0x76540000 end_va = 0x76596fff monitored = 0 entry_point = 0x76559ba6 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 426 start_va = 0x750c0000 end_va = 0x752bafff monitored = 0 entry_point = 0x750c22d9 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 427 start_va = 0x76a50000 end_va = 0x76adefff monitored = 0 entry_point = 0x76a53fb1 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 428 start_va = 0x754f0000 end_va = 0x75610fff monitored = 0 entry_point = 0x754f158e region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 429 start_va = 0x74d50000 end_va = 0x74d5bfff monitored = 0 entry_point = 0x74d5238e region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 430 start_va = 0x72fb0000 end_va = 0x72fd9fff monitored = 0 entry_point = 0x72fb10ed region_type = mapped_file name = "msls31.dll" filename = "\\Windows\\SysWOW64\\msls31.dll" (normalized: "c:\\windows\\syswow64\\msls31.dll") Region: id = 431 start_va = 0x73ca0000 end_va = 0x73ca8fff monitored = 0 entry_point = 0x73ca1220 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 432 start_va = 0x9c0000 end_va = 0xa3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000009c0000" filename = "" Region: id = 433 start_va = 0xa90000 end_va = 0xb8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a90000" filename = "" Region: id = 434 start_va = 0x20000 end_va = 0x3dfff monitored = 0 entry_point = 0x3158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 435 start_va = 0xb90000 end_va = 0xd17fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b90000" filename = "" Region: id = 436 start_va = 0x20000 end_va = 0x3dfff monitored = 0 entry_point = 0x3158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 437 start_va = 0x769f0000 end_va = 0x76a4ffff monitored = 0 entry_point = 0x76a0158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 438 start_va = 0x76380000 end_va = 0x7644bfff monitored = 0 entry_point = 0x7638168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 439 start_va = 0xd20000 end_va = 0xea0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d20000" filename = "" Region: id = 440 start_va = 0xeb0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000eb0000" filename = "" Region: id = 441 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 442 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 443 start_va = 0x22b0000 end_va = 0x2330fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022b0000" filename = "" Region: id = 446 start_va = 0x2340000 end_va = 0x1ba45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002340000" filename = "" Region: id = 447 start_va = 0x72790000 end_va = 0x729cffff monitored = 0 entry_point = 0x727966bd region_type = mapped_file name = "msi.dll" filename = "\\Windows\\SysWOW64\\msi.dll" (normalized: "c:\\windows\\syswow64\\msi.dll") Region: id = 448 start_va = 0x75730000 end_va = 0x76379fff monitored = 0 entry_point = 0x757b1601 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 449 start_va = 0x320000 end_va = 0x35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000320000" filename = "" Region: id = 450 start_va = 0x9c0000 end_va = 0x9fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000009c0000" filename = "" Region: id = 451 start_va = 0xa30000 end_va = 0xa3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a30000" filename = "" Region: id = 452 start_va = 0x7efd8000 end_va = 0x7efdafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 453 start_va = 0x360000 end_va = 0x361fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000360000" filename = "" Region: id = 454 start_va = 0x73d70000 end_va = 0x73f0dfff monitored = 0 entry_point = 0x73d9e6b5 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 455 start_va = 0x370000 end_va = 0x370fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 456 start_va = 0xa00000 end_va = 0xa01fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a00000" filename = "" Region: id = 457 start_va = 0x1ba50000 end_va = 0x1bd1efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 458 start_va = 0x370000 end_va = 0x370fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000370000" filename = "" Region: id = 459 start_va = 0x73d60000 end_va = 0x73d6afff monitored = 0 entry_point = 0x73d61992 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 460 start_va = 0xa10000 end_va = 0xa1ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "index.dat" filename = "\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat") Region: id = 461 start_va = 0xa20000 end_va = 0xa27fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "index.dat" filename = "\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat") Region: id = 462 start_va = 0xa40000 end_va = 0xa4ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "index.dat" filename = "\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat") Region: id = 463 start_va = 0x76920000 end_va = 0x76954fff monitored = 0 entry_point = 0x7692145d region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 464 start_va = 0x754d0000 end_va = 0x754d5fff monitored = 0 entry_point = 0x754d1782 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 465 start_va = 0x1bd20000 end_va = 0x1bd7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bd20000" filename = "" Region: id = 466 start_va = 0x73ce0000 end_va = 0x73d23fff monitored = 0 entry_point = 0x73cf63f9 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll") Region: id = 467 start_va = 0x1bd80000 end_va = 0x1bf3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bd80000" filename = "" Region: id = 468 start_va = 0x73cc0000 end_va = 0x73cdbfff monitored = 0 entry_point = 0x73cca431 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 469 start_va = 0x73cb0000 end_va = 0x73cb6fff monitored = 0 entry_point = 0x73cb128d region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 470 start_va = 0xa50000 end_va = 0xa8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a50000" filename = "" Region: id = 471 start_va = 0x1bd80000 end_va = 0x1bdbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bd80000" filename = "" Region: id = 472 start_va = 0x1bf00000 end_va = 0x1bf3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bf00000" filename = "" Region: id = 473 start_va = 0x7efd5000 end_va = 0x7efd7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Region: id = 474 start_va = 0x73ae0000 end_va = 0x73b31fff monitored = 0 entry_point = 0x73ae14be region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\SysWOW64\\rasapi32.dll" (normalized: "c:\\windows\\syswow64\\rasapi32.dll") Region: id = 475 start_va = 0x73ac0000 end_va = 0x73ad4fff monitored = 0 entry_point = 0x73ac12de region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\SysWOW64\\rasman.dll" (normalized: "c:\\windows\\syswow64\\rasman.dll") Region: id = 476 start_va = 0x73ab0000 end_va = 0x73abcfff monitored = 0 entry_point = 0x73ab1326 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\SysWOW64\\rtutils.dll" (normalized: "c:\\windows\\syswow64\\rtutils.dll") Region: id = 477 start_va = 0x1bd20000 end_va = 0x1bd20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bd20000" filename = "" Region: id = 478 start_va = 0x1bd40000 end_va = 0x1bd7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bd40000" filename = "" Region: id = 479 start_va = 0x1bd20000 end_va = 0x1bd20fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bd20000" filename = "" Region: id = 480 start_va = 0x73aa0000 end_va = 0x73aa5fff monitored = 0 entry_point = 0x73aa125a region_type = mapped_file name = "sensapi.dll" filename = "\\Windows\\SysWOW64\\SensApi.dll" (normalized: "c:\\windows\\syswow64\\sensapi.dll") Region: id = 481 start_va = 0x1bdc0000 end_va = 0x1bdfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bdc0000" filename = "" Region: id = 482 start_va = 0x1be00000 end_va = 0x1be3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001be00000" filename = "" Region: id = 483 start_va = 0x7efad000 end_va = 0x7efaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efad000" filename = "" Region: id = 484 start_va = 0x1be40000 end_va = 0x1be7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001be40000" filename = "" Region: id = 485 start_va = 0x1be80000 end_va = 0x1bebffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001be80000" filename = "" Region: id = 486 start_va = 0x7efaa000 end_va = 0x7efacfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efaa000" filename = "" Region: id = 487 start_va = 0x1bec0000 end_va = 0x1befffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bec0000" filename = "" Region: id = 488 start_va = 0x1bf40000 end_va = 0x1bf7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bf40000" filename = "" Region: id = 489 start_va = 0x7efa7000 end_va = 0x7efa9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efa7000" filename = "" Region: id = 490 start_va = 0x74b50000 end_va = 0x74b66fff monitored = 0 entry_point = 0x74b51c9d region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\SysWOW64\\userenv.dll" (normalized: "c:\\windows\\syswow64\\userenv.dll") Region: id = 491 start_va = 0x76c70000 end_va = 0x76c9efff monitored = 0 entry_point = 0x76c72a35 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\SysWOW64\\wintrust.dll" (normalized: "c:\\windows\\syswow64\\wintrust.dll") Region: id = 492 start_va = 0x74b10000 end_va = 0x74b4efff monitored = 0 entry_point = 0x74b12351 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\SysWOW64\\schannel.dll" (normalized: "c:\\windows\\syswow64\\schannel.dll") Region: id = 493 start_va = 0x73a90000 end_va = 0x73a9ffff monitored = 0 entry_point = 0x73a938c1 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\SysWOW64\\nlaapi.dll" (normalized: "c:\\windows\\syswow64\\nlaapi.dll") Region: id = 494 start_va = 0x1bf80000 end_va = 0x1c10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bf80000" filename = "" Region: id = 495 start_va = 0x1bf80000 end_va = 0x1c07ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bf80000" filename = "" Region: id = 496 start_va = 0x1c100000 end_va = 0x1c10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c100000" filename = "" Region: id = 497 start_va = 0x1bf80000 end_va = 0x1c01ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bf80000" filename = "" Region: id = 498 start_va = 0x1c070000 end_va = 0x1c07ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c070000" filename = "" Region: id = 499 start_va = 0x73c30000 end_va = 0x73c35fff monitored = 0 entry_point = 0x73c314b2 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\SysWOW64\\rasadhlp.dll" (normalized: "c:\\windows\\syswow64\\rasadhlp.dll") Region: id = 500 start_va = 0x1bd30000 end_va = 0x1bd30fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bd30000" filename = "" Region: id = 501 start_va = 0x1c110000 end_va = 0x1c20ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c110000" filename = "" Region: id = 502 start_va = 0x73d30000 end_va = 0x73d50fff monitored = 0 entry_point = 0x73d3145e region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll") Region: id = 503 start_va = 0x74d00000 end_va = 0x74d44fff monitored = 0 entry_point = 0x74d011e1 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\SysWOW64\\Wldap32.dll" (normalized: "c:\\windows\\syswow64\\wldap32.dll") Region: id = 504 start_va = 0x1bf80000 end_va = 0x1bf87fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "urlmon.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\urlmon.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\urlmon.dll.mui") Region: id = 505 start_va = 0x73c60000 end_va = 0x73c9bfff monitored = 0 entry_point = 0x73c6145d region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll") Region: id = 506 start_va = 0x1bf90000 end_va = 0x1bfcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bf90000" filename = "" Region: id = 507 start_va = 0x73c50000 end_va = 0x73c54fff monitored = 0 entry_point = 0x73c515df region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\SysWOW64\\WSHTCPIP.DLL" (normalized: "c:\\windows\\syswow64\\wshtcpip.dll") Region: id = 508 start_va = 0x73c40000 end_va = 0x73c45fff monitored = 0 entry_point = 0x73c41673 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\SysWOW64\\wship6.dll" (normalized: "c:\\windows\\syswow64\\wship6.dll") Region: id = 509 start_va = 0x73b70000 end_va = 0x73ba7fff monitored = 0 entry_point = 0x73b7990e region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\SysWOW64\\FWPUCLNT.DLL" (normalized: "c:\\windows\\syswow64\\fwpuclnt.dll") Region: id = 510 start_va = 0x1c210000 end_va = 0x1c34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c210000" filename = "" Region: id = 511 start_va = 0x73a30000 end_va = 0x73a46fff monitored = 0 entry_point = 0x73a33573 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 512 start_va = 0x74b80000 end_va = 0x74b87fff monitored = 0 entry_point = 0x74b834d3 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\SysWOW64\\credssp.dll" (normalized: "c:\\windows\\syswow64\\credssp.dll") Region: id = 513 start_va = 0x1bfd0000 end_va = 0x1bfd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bfd0000" filename = "" Region: id = 514 start_va = 0x74b70000 end_va = 0x74b77fff monitored = 0 entry_point = 0x74b710e9 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\SysWOW64\\secur32.dll" (normalized: "c:\\windows\\syswow64\\secur32.dll") Region: id = 515 start_va = 0x74ad0000 end_va = 0x74b07fff monitored = 0 entry_point = 0x74ad1489 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\SysWOW64\\ncrypt.dll" (normalized: "c:\\windows\\syswow64\\ncrypt.dll") Region: id = 516 start_va = 0x74ab0000 end_va = 0x74ac6fff monitored = 0 entry_point = 0x74ab35fa region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 517 start_va = 0x72390000 end_va = 0x723ccfff monitored = 0 entry_point = 0x723910f5 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 518 start_va = 0x73a30000 end_va = 0x73a46fff monitored = 0 entry_point = 0x73a33573 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 519 start_va = 0x1bfd0000 end_va = 0x1c00bfff monitored = 0 entry_point = 0x1bfd128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 520 start_va = 0x1bfd0000 end_va = 0x1c00bfff monitored = 0 entry_point = 0x1bfd128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 521 start_va = 0x1bfd0000 end_va = 0x1c00bfff monitored = 0 entry_point = 0x1bfd128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 522 start_va = 0x1bfd0000 end_va = 0x1c00bfff monitored = 0 entry_point = 0x1bfd128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 523 start_va = 0x1bfd0000 end_va = 0x1c00bfff monitored = 0 entry_point = 0x1bfd128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 524 start_va = 0x739f0000 end_va = 0x73a2afff monitored = 0 entry_point = 0x739f128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 525 start_va = 0x1c210000 end_va = 0x1c30ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c210000" filename = "" Region: id = 526 start_va = 0x1c310000 end_va = 0x1c34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c310000" filename = "" Region: id = 527 start_va = 0x74a90000 end_va = 0x74aa5fff monitored = 0 entry_point = 0x74a92061 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\SysWOW64\\gpapi.dll" (normalized: "c:\\windows\\syswow64\\gpapi.dll") Region: id = 869 start_va = 0x1bfd0000 end_va = 0x1bfd9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "crypt32.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\crypt32.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\crypt32.dll.mui") Region: id = 870 start_va = 0x1bfe0000 end_va = 0x1bfe2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bfe0000" filename = "" Region: id = 871 start_va = 0x1c350000 end_va = 0x1c54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c350000" filename = "" Region: id = 872 start_va = 0x1bfe0000 end_va = 0x1c01ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bfe0000" filename = "" Region: id = 873 start_va = 0x1c550000 end_va = 0x1c64ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c550000" filename = "" Region: id = 874 start_va = 0x7efa4000 end_va = 0x7efa6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efa4000" filename = "" Region: id = 875 start_va = 0x74a80000 end_va = 0x74a8bfff monitored = 0 entry_point = 0x74a8505c region_type = mapped_file name = "vaultcli.dll" filename = "\\Windows\\SysWOW64\\vaultcli.dll" (normalized: "c:\\windows\\syswow64\\vaultcli.dll") Region: id = 876 start_va = 0x1c020000 end_va = 0x1c05ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c020000" filename = "" Region: id = 877 start_va = 0x1c650000 end_va = 0x1c74ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c650000" filename = "" Region: id = 878 start_va = 0x7efa1000 end_va = 0x7efa3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efa1000" filename = "" Thread: id = 6 os_tid = 0xfec [0139.728] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0139.729] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x18fe34*=0x0, ZeroBits=0x0, RegionSize=0x18fe30*=0x81000, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0x18fe34*=0x22b0000, RegionSize=0x18fe30*=0x81000) returned 0x0 [0139.731] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0139.731] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0139.738] RtlAddVectoredExceptionHandler (FirstHandler=0x1, VectoredHandler=0x1c23ee) returned 0xaa1808 [0139.743] LoadLibraryA (lpLibFileName="user32") returned 0x74f70000 [0139.745] LoadLibraryA (lpLibFileName="kernel32") returned 0x75620000 [0139.751] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0139.758] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0139.758] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x11000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x11000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0xf000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0139.759] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x12000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x12000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0xe000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0139.759] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x13000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x13000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0xd000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0139.759] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x14000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x14000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0xc000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0139.759] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x15000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x15000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0xb000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0139.759] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x16000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x16000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0xa000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0139.759] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x17000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x17000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x9000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0139.760] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x18000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x18000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x8000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0139.760] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x19000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x19000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x7000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0139.760] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x1a000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x6000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0139.760] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x1b000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0139.760] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x1c000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0139.760] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x1d000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0139.761] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x1e000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0139.761] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x1f000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0139.761] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x20000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x20000, AllocationBase=0x20000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.761] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x21000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x21000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.761] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x22000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x22000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xe000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.761] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x23000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x23000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xd000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.761] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x24000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x24000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xc000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.762] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x25000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x25000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xb000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.762] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x26000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x26000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xa000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.762] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x27000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x27000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x9000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.762] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x28000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x28000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x8000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.762] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x29000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x7000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.762] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x2a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x2a000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x6000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.762] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x2b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x2b000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x5000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.762] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x2c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x2c000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.762] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x2d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x2d000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x3000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.762] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x2e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x2e000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x2000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.762] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x2f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x2f000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x1000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.762] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x30000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x30000, AllocationBase=0x30000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.762] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x31000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x31000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.763] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x32000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x32000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xe000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.763] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x33000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x33000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xd000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.763] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x34000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x34000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xc000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.763] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x35000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x35000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xb000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.763] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x36000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x36000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xa000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.763] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x37000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x37000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x9000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.763] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x38000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x38000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x8000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.763] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x39000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x39000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x7000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.763] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x3a000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x6000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.763] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x3b000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x5000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.763] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x3c000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.763] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x3d000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x3000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.763] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x3e000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x2000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.764] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x3f000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x1000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.764] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x40000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x40000, AllocationBase=0x40000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000), ResultLength=0x0) returned 0x0 [0139.764] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x41000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x41000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.764] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x42000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x42000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xe000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.764] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x43000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x43000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xd000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.764] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x44000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x44000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xc000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.764] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x45000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x45000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xb000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.764] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x46000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x46000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xa000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.765] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x47000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x47000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x9000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.765] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x48000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x48000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x8000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.765] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x49000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x49000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x7000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.765] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x4a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x4a000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x6000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.765] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x4b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x4b000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x5000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.765] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x4c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x4c000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.765] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x4d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x4d000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x3000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.765] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x4e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x4e000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x2000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.765] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x4f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x4f000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x1000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0139.765] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x50000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x50000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x39000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.765] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x51000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x51000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x38000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.765] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x52000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x52000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x37000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.765] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x53000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x53000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x36000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.766] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x54000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x54000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x35000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.766] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x55000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x55000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x34000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.766] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x56000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x56000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x33000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.766] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x57000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x57000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x32000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.766] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x58000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x58000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x31000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.766] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x59000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x59000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x30000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.766] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x5a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x5a000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x2f000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.766] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x5b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x5b000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x2e000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.766] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x5c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x5c000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x2d000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.766] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x5d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x5d000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x2c000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.766] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x5e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x5e000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x2b000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.766] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x5f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x5f000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x2a000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.767] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x60000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x60000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x29000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.767] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x61000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x61000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x28000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.767] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x62000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x62000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x27000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.767] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x63000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x63000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x26000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.767] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x64000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x64000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x25000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.767] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x65000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x65000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x24000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.767] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x66000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x66000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x23000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.767] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x67000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x67000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x22000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.767] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x68000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x68000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x21000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.767] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x69000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x69000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x20000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.767] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x6a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x6a000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x1f000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.767] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x6b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x6b000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x1e000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.767] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x6c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x6c000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x1d000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.767] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x6d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x6d000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x1c000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.768] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x6e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x6e000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x1b000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.768] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x6f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x6f000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x1a000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.768] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x70000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x70000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x19000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.768] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x71000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x71000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x18000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.768] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x72000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x72000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x17000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.768] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x73000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x73000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x16000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.768] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x74000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x74000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x15000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.768] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x75000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x75000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x14000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.768] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x76000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x76000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x13000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.768] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x77000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x77000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x12000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.768] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x78000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x78000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x11000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.768] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x79000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x79000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x10000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.768] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x7a000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0xf000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.769] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x7b000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0xe000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.769] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x7c000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0xd000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.769] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x7d000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0xc000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.769] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x7e000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0xb000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.769] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x7f000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0xa000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.769] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x80000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x80000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x9000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.769] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x81000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x81000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x8000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.769] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x82000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x82000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x7000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.769] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x83000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x83000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x6000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.769] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x84000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x84000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x5000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.769] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x85000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x85000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x4000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.769] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x86000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x86000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.769] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x87000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x87000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.770] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x88000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x88000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.770] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x89000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x89000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.770] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x8a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x8a000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.770] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x8b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x8b000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x104, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.770] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x8c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x8c000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.770] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x8d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x8d000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.770] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x8e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x8e000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.770] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x8f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x8f000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.770] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x90000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x90000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xfc000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.770] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x91000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x91000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xfb000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.771] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x92000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x92000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xfa000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.771] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x93000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x93000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xf9000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.771] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x94000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x94000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xf8000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.771] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x95000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x95000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xf7000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.771] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x96000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x96000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xf6000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.771] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x97000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x97000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xf5000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.771] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x98000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x98000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xf4000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.771] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x99000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x99000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xf3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.771] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x9a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x9a000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xf2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.771] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x9b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x9b000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xf1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.771] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x9c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x9c000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xf0000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.771] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x9d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x9d000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xef000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.771] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x9e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x9e000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xee000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.772] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x9f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x9f000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xed000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.772] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xa0000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xec000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.772] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xa1000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xeb000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.772] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xa2000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xea000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.772] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xa3000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xe9000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.772] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xa4000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xe8000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.772] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xa5000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xe7000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.772] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xa6000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xe6000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.772] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xa7000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xe5000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.772] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xa8000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xe4000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.772] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xa9000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xe3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.772] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xaa000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xaa000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xe2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.772] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xab000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xab000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xe1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.773] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xac000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xac000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xe0000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.773] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xad000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xad000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xdf000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.773] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xae000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xae000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xde000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.773] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xaf000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xaf000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xdd000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.773] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xb0000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xdc000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.773] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xb1000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xdb000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.773] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xb2000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xda000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.773] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xb3000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xd9000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.773] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xb4000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xd8000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.773] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xb5000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xd7000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.773] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xb6000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xd6000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.773] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xb7000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xd5000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.773] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xb8000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xd4000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.774] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xb9000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xd3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.774] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xba000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xba000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xd2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.774] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xbb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xbb000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xd1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.774] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xbc000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xbc000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xd0000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.774] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xbd000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xbd000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xcf000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.774] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xbe000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xbe000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xce000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.774] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xbf000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xbf000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xcd000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.774] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xc0000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xcc000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.774] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xc1000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xcb000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.774] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xc2000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xca000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.774] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xc3000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xc9000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.774] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xc4000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xc8000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.775] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xc5000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xc7000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.775] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xc6000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xc6000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.775] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xc7000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xc5000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.775] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xc8000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xc4000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.775] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xc9000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xc3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.775] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xca000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xca000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xc2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.775] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xcb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xcb000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xc1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.775] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xcc000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xcc000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xc0000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.775] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xcd000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xcd000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xbf000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.775] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xce000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xce000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xbe000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.775] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xcf000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xcf000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xbd000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.775] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xd0000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xbc000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.775] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xd1000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xbb000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.776] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xd2000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xba000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.776] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xd3000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xb9000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.776] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xd4000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xb8000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.776] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xd5000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xb7000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.776] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xd6000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xb6000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.776] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xd7000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xb5000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.776] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xd8000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xb4000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.776] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xd9000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xb3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.776] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xda000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xda000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xb2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.776] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xdb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xdb000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xb1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.776] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xdc000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xdc000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xb0000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.776] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xdd000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xdd000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xaf000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.776] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xde000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xde000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xae000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.777] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xdf000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xdf000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xad000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.777] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xe0000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xac000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.777] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xe1000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xab000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.777] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xe2000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xaa000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.777] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xe3000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xa9000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.777] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xe4000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xa8000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.777] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xe5000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xa7000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.777] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xe6000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xa6000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.777] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xe7000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xa5000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.777] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xe8000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xa4000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.777] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xe9000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xa3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.777] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xea000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xea000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xa2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.777] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xeb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xeb000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xa1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.778] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xec000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xec000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0xa0000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.778] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xed000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xed000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x9f000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.778] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xee000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xee000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x9e000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.778] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xef000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xef000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x9d000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.778] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xf0000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x9c000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.778] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xf1000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x9b000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.778] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xf2000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x9a000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.778] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xf3000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x99000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.778] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xf4000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x98000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.778] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xf5000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x97000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.778] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xf6000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x96000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.778] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xf7000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x95000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.778] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xf8000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x94000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.779] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xf9000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x93000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.779] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xfa000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xfa000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x92000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.779] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xfb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xfb000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x91000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.779] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xfc000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xfc000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x90000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.779] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xfd000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xfd000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x8f000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.779] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xfe000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xfe000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x8e000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.779] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xff000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0xff000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x8d000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.779] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x100000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x100000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x8c000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.779] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x101000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x101000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x8b000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.779] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x102000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x102000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x8a000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.779] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x103000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x103000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x89000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.779] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x104000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x104000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x88000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.779] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x105000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x105000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x87000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.780] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x106000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x106000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x86000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.780] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x107000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x107000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x85000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0139.780] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x108000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x18fbb0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x18fbb0*(BaseAddress=0x108000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x84000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0157.235] LoadLibraryA (lpLibFileName="kernel32") returned 0x75620000 [0157.236] CreateFileA (lpFileName="C:\\Program Files\\Qemu-ga\\qemu-ga.exe" (normalized: "c:\\program files\\qemu-ga\\qemu-ga.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0157.237] CreateFileA (lpFileName="C:\\Program Files\\qga\\qga.exe" (normalized: "c:\\program files\\qga\\qga.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0159.121] LoadLibraryA (lpLibFileName="kernel32") returned 0x75620000 [0159.122] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0159.145] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0159.145] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0159.145] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x18fcd0*=0x77160000, NumberOfBytesToProtect=0x18fcd4, NewAccessProtection=0x40, OldAccessProtection=0x18fcd8 | out: BaseAddress=0x18fcd0*=0x77160000, NumberOfBytesToProtect=0x18fcd4, OldAccessProtection=0x18fcd8*=0x20) returned 0x0 [0159.158] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x18fcd0*=0x77160000, NumberOfBytesToProtect=0x18fcd4, NewAccessProtection=0x20, OldAccessProtection=0x18fcd8 | out: BaseAddress=0x18fcd0*=0x77160000, NumberOfBytesToProtect=0x18fcd4, OldAccessProtection=0x18fcd8*=0x40) returned 0x0 [0159.236] LoadLibraryA (lpLibFileName="user32") returned 0x74f70000 [0159.237] EnumWindows (lpEnumFunc=0x1b13e5, lParam=0x18fce8) returned 1 [0159.271] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0159.284] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0159.285] LoadLibraryA (lpLibFileName="psapi.dll") returned 0x754e0000 [0159.303] EnumDeviceDrivers (in: lpImageBase=0x2351000, cb=0x8000, lpcbNeeded=0x18fde4 | out: lpImageBase=0x2351000*=0x2a61000, lpcbNeeded=0x18fde4) returned 1 [0159.308] LoadLibraryA (lpLibFileName="psapi.dll") returned 0x754e0000 [0159.362] GetDeviceDriverBaseNameA (in: ImageBase=0x2a61000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="ntoskrnl.exe") returned 0xc [0159.363] GetDeviceDriverBaseNameA (in: ImageBase=0x2a18000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="hal.dll") returned 0x7 [0159.363] GetDeviceDriverBaseNameA (in: ImageBase=0xba5000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="kdcom.dll") returned 0x9 [0159.364] GetDeviceDriverBaseNameA (in: ImageBase=0xc7b000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="mcupdate_GenuineIntel.dll") returned 0x19 [0159.364] GetDeviceDriverBaseNameA (in: ImageBase=0xcca000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="PSHED.dll") returned 0x9 [0159.365] GetDeviceDriverBaseNameA (in: ImageBase=0xcde000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="CLFS.SYS") returned 0x8 [0159.365] GetDeviceDriverBaseNameA (in: ImageBase=0xd3c000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="CI.dll") returned 0x6 [0159.366] GetDeviceDriverBaseNameA (in: ImageBase=0xe9c000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="Wdf01000.sys") returned 0xc [0159.366] GetDeviceDriverBaseNameA (in: ImageBase=0xf40000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="WDFLDR.SYS") returned 0xa [0159.366] GetDeviceDriverBaseNameA (in: ImageBase=0xf4f000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="ACPI.sys") returned 0x8 [0159.367] GetDeviceDriverBaseNameA (in: ImageBase=0xfa6000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="WMILIB.SYS") returned 0xa [0159.367] GetDeviceDriverBaseNameA (in: ImageBase=0xfaf000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="msisadrv.sys") returned 0xc [0159.368] GetDeviceDriverBaseNameA (in: ImageBase=0xfb9000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="pci.sys") returned 0x7 [0159.368] GetDeviceDriverBaseNameA (in: ImageBase=0xfec000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="vdrvroot.sys") returned 0xc [0159.368] GetDeviceDriverBaseNameA (in: ImageBase=0xe00000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="partmgr.sys") returned 0xb [0159.369] GetDeviceDriverBaseNameA (in: ImageBase=0xe15000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="volmgr.sys") returned 0xa [0159.369] GetDeviceDriverBaseNameA (in: ImageBase=0xe2a000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="volmgrx.sys") returned 0xb [0159.370] GetDeviceDriverBaseNameA (in: ImageBase=0xdb1000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="mountmgr.sys") returned 0xc [0159.370] GetDeviceDriverBaseNameA (in: ImageBase=0xe86000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="atapi.sys") returned 0x9 [0159.371] GetDeviceDriverBaseNameA (in: ImageBase=0xdcb000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="ataport.SYS") returned 0xb [0159.371] GetDeviceDriverBaseNameA (in: ImageBase=0xe8f000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="msahci.sys") returned 0xa [0159.371] GetDeviceDriverBaseNameA (in: ImageBase=0xc00000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="PCIIDEX.SYS") returned 0xb [0159.372] GetDeviceDriverBaseNameA (in: ImageBase=0xc10000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="amdxata.sys") returned 0xb [0159.372] GetDeviceDriverBaseNameA (in: ImageBase=0xc1b000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="fltmgr.sys") returned 0xa [0159.373] GetDeviceDriverBaseNameA (in: ImageBase=0xc67000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="fileinfo.sys") returned 0xc [0159.373] GetDeviceDriverBaseNameA (in: ImageBase=0x1008000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="Ntfs.sys") returned 0x8 [0159.374] GetDeviceDriverBaseNameA (in: ImageBase=0x1228000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="msrpc.sys") returned 0x9 [0159.374] GetDeviceDriverBaseNameA (in: ImageBase=0x1286000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="ksecdd.sys") returned 0xa [0159.375] GetDeviceDriverBaseNameA (in: ImageBase=0x12a1000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="cng.sys") returned 0x7 [0159.375] GetDeviceDriverBaseNameA (in: ImageBase=0x1313000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="pcw.sys") returned 0x7 [0159.376] GetDeviceDriverBaseNameA (in: ImageBase=0x1324000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="Fs_Rec.sys") returned 0xa [0159.376] GetDeviceDriverBaseNameA (in: ImageBase=0x1489000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="ndis.sys") returned 0x8 [0159.376] GetDeviceDriverBaseNameA (in: ImageBase=0x157c000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="NETIO.SYS") returned 0x9 [0159.377] GetDeviceDriverBaseNameA (in: ImageBase=0x1400000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="ksecpkg.sys") returned 0xb [0159.377] GetDeviceDriverBaseNameA (in: ImageBase=0x1624000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="tcpip.sys") returned 0x9 [0159.378] GetDeviceDriverBaseNameA (in: ImageBase=0x1828000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="fwpkclnt.sys") returned 0xc [0159.378] GetDeviceDriverBaseNameA (in: ImageBase=0x1872000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="vmstorfl.sys") returned 0xc [0159.378] GetDeviceDriverBaseNameA (in: ImageBase=0x1882000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="volsnap.sys") returned 0xb [0159.379] GetDeviceDriverBaseNameA (in: ImageBase=0x18ce000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="spldr.sys") returned 0x9 [0159.379] GetDeviceDriverBaseNameA (in: ImageBase=0x18d6000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="rdyboost.sys") returned 0xc [0159.379] GetDeviceDriverBaseNameA (in: ImageBase=0x1910000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="mup.sys") returned 0x7 [0159.380] GetDeviceDriverBaseNameA (in: ImageBase=0x1922000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="hwpolicy.sys") returned 0xc [0159.380] GetDeviceDriverBaseNameA (in: ImageBase=0x192b000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="fvevol.sys") returned 0xa [0159.381] GetDeviceDriverBaseNameA (in: ImageBase=0x1965000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="disk.sys") returned 0x8 [0159.381] GetDeviceDriverBaseNameA (in: ImageBase=0x197b000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="CLASSPNP.SYS") returned 0xc [0159.382] GetDeviceDriverBaseNameA (in: ImageBase=0x19e3000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="Null.SYS") returned 0x8 [0159.382] GetDeviceDriverBaseNameA (in: ImageBase=0x19ec000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="Beep.SYS") returned 0x8 [0159.382] GetDeviceDriverBaseNameA (in: ImageBase=0x1600000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="vga.sys") returned 0x7 [0159.383] GetDeviceDriverBaseNameA (in: ImageBase=0x1456000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="VIDEOPRT.SYS") returned 0xc [0159.383] GetDeviceDriverBaseNameA (in: ImageBase=0x160e000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="watchdog.sys") returned 0xc [0159.384] GetDeviceDriverBaseNameA (in: ImageBase=0x19f3000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="RDPCDD.sys") returned 0xa [0159.384] GetDeviceDriverBaseNameA (in: ImageBase=0x147b000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="rdpencdd.sys") returned 0xc [0159.384] GetDeviceDriverBaseNameA (in: ImageBase=0x15dc000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="rdprefmp.sys") returned 0xc [0159.385] GetDeviceDriverBaseNameA (in: ImageBase=0x15e5000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="Msfs.SYS") returned 0x8 [0159.385] GetDeviceDriverBaseNameA (in: ImageBase=0x142c000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="Npfs.SYS") returned 0x8 [0159.386] GetDeviceDriverBaseNameA (in: ImageBase=0x132e000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="tdx.sys") returned 0x7 [0159.386] GetDeviceDriverBaseNameA (in: ImageBase=0x143d000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="TDI.SYS") returned 0x7 [0159.386] GetDeviceDriverBaseNameA (in: ImageBase=0x1350000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="afd.sys") returned 0x7 [0159.387] GetDeviceDriverBaseNameA (in: ImageBase=0x11ab000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="netbt.sys") returned 0x9 [0159.387] GetDeviceDriverBaseNameA (in: ImageBase=0x144a000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="wfplwf.sys") returned 0xa [0159.388] GetDeviceDriverBaseNameA (in: ImageBase=0x13d9000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="pacer.sys") returned 0x9 [0159.388] GetDeviceDriverBaseNameA (in: ImageBase=0x15f0000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="netbios.sys") returned 0xb [0159.388] GetDeviceDriverBaseNameA (in: ImageBase=0x1200000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="wanarp.sys") returned 0xa [0159.389] GetDeviceDriverBaseNameA (in: ImageBase=0x3607000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="termdd.sys") returned 0xa [0159.389] GetDeviceDriverBaseNameA (in: ImageBase=0x361b000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="rdbss.sys") returned 0x9 [0159.390] GetDeviceDriverBaseNameA (in: ImageBase=0x366c000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="nsiproxy.sys") returned 0xc [0159.390] GetDeviceDriverBaseNameA (in: ImageBase=0x3678000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="mssmbios.sys") returned 0xc [0159.390] GetDeviceDriverBaseNameA (in: ImageBase=0x3683000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="discache.sys") returned 0xc [0159.391] GetDeviceDriverBaseNameA (in: ImageBase=0x3692000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="csc.sys") returned 0x7 [0159.391] GetDeviceDriverBaseNameA (in: ImageBase=0x3715000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="dfsc.sys") returned 0x8 [0159.391] GetDeviceDriverBaseNameA (in: ImageBase=0x3733000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="blbdrive.sys") returned 0xc [0159.392] GetDeviceDriverBaseNameA (in: ImageBase=0x3744000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="tunnel.sys") returned 0xa [0159.392] GetDeviceDriverBaseNameA (in: ImageBase=0x376a000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="vgapnp.sys") returned 0xa [0159.393] GetDeviceDriverBaseNameA (in: ImageBase=0x3778000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="usbehci.sys") returned 0xb [0159.393] GetDeviceDriverBaseNameA (in: ImageBase=0x3789000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="USBPORT.SYS") returned 0xb [0159.393] GetDeviceDriverBaseNameA (in: ImageBase=0x37df000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="usbuhci.sys") returned 0xb [0159.394] GetDeviceDriverBaseNameA (in: ImageBase=0x3cb1000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="HDAudBus.sys") returned 0xc [0159.394] GetDeviceDriverBaseNameA (in: ImageBase=0x3cd5000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="i8042prt.sys") returned 0xc [0159.395] GetDeviceDriverBaseNameA (in: ImageBase=0x3cf3000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="kbdclass.sys") returned 0xc [0159.395] GetDeviceDriverBaseNameA (in: ImageBase=0x3d02000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="mouclass.sys") returned 0xc [0159.395] GetDeviceDriverBaseNameA (in: ImageBase=0x3d11000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="intelppm.sys") returned 0xc [0159.396] GetDeviceDriverBaseNameA (in: ImageBase=0x3d27000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="CompositeBus.sys") returned 0x10 [0159.396] GetDeviceDriverBaseNameA (in: ImageBase=0x3d37000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="AgileVpn.sys") returned 0xc [0159.397] GetDeviceDriverBaseNameA (in: ImageBase=0x3d4d000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="rasl2tp.sys") returned 0xb [0159.397] GetDeviceDriverBaseNameA (in: ImageBase=0x3d71000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="ndistapi.sys") returned 0xc [0159.397] GetDeviceDriverBaseNameA (in: ImageBase=0x3d7d000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="ndiswan.sys") returned 0xb [0159.398] GetDeviceDriverBaseNameA (in: ImageBase=0x3dac000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="raspppoe.sys") returned 0xc [0159.398] GetDeviceDriverBaseNameA (in: ImageBase=0x3dc7000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="raspptp.sys") returned 0xb [0159.398] GetDeviceDriverBaseNameA (in: ImageBase=0x3c00000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="rassstp.sys") returned 0xb [0159.399] GetDeviceDriverBaseNameA (in: ImageBase=0x3c1a000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="rdpbus.sys") returned 0xa [0159.399] GetDeviceDriverBaseNameA (in: ImageBase=0x3c25000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="swenum.sys") returned 0xa [0159.400] GetDeviceDriverBaseNameA (in: ImageBase=0x3c27000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="ks.sys") returned 0x6 [0159.400] GetDeviceDriverBaseNameA (in: ImageBase=0x3de8000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="umbus.sys") returned 0x9 [0159.400] GetDeviceDriverBaseNameA (in: ImageBase=0x3eba000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="usbhub.sys") returned 0xa [0159.401] GetDeviceDriverBaseNameA (in: ImageBase=0x3f14000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="NDProxy.SYS") returned 0xb [0159.401] GetDeviceDriverBaseNameA (in: ImageBase=0x3f29000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="HdAudio.sys") returned 0xb [0159.402] GetDeviceDriverBaseNameA (in: ImageBase=0x3f85000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="portcls.sys") returned 0xb [0159.402] GetDeviceDriverBaseNameA (in: ImageBase=0x3fc2000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="drmk.sys") returned 0x8 [0159.402] GetDeviceDriverBaseNameA (in: ImageBase=0x3fe4000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="ksthunk.sys") returned 0xb [0159.403] GetDeviceDriverBaseNameA (in: ImageBase=0x3fea000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="crashdmp.sys") returned 0xc [0159.403] GetDeviceDriverBaseNameA (in: ImageBase=0x3e00000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="dump_dumpata.sys") returned 0x10 [0159.404] GetDeviceDriverBaseNameA (in: ImageBase=0x3e0c000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="dump_msahci.sys") returned 0xf [0159.404] GetDeviceDriverBaseNameA (in: ImageBase=0x3e17000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="dump_dumpfve.sys") returned 0x10 [0159.404] GetDeviceDriverBaseNameA (in: ImageBase=0x10000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="win32k.sys") returned 0xa [0159.405] GetDeviceDriverBaseNameA (in: ImageBase=0x3e2a000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="Dxapi.sys") returned 0x9 [0159.405] GetDeviceDriverBaseNameA (in: ImageBase=0x4e0000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="dxg.sys") returned 0x7 [0159.406] GetDeviceDriverBaseNameA (in: ImageBase=0x3e36000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="monitor.sys") returned 0xb [0159.406] GetDeviceDriverBaseNameA (in: ImageBase=0x7e0000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="TSDDD.dll") returned 0x9 [0159.407] GetDeviceDriverBaseNameA (in: ImageBase=0x3e44000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="hidusb.sys") returned 0xa [0159.407] GetDeviceDriverBaseNameA (in: ImageBase=0x3e52000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="HIDCLASS.SYS") returned 0xc [0159.407] GetDeviceDriverBaseNameA (in: ImageBase=0x3e6b000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="HIDPARSE.SYS") returned 0xc [0159.408] GetDeviceDriverBaseNameA (in: ImageBase=0x3e74000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="USBD.SYS") returned 0x8 [0159.408] GetDeviceDriverBaseNameA (in: ImageBase=0x3e76000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="kbdhid.sys") returned 0xa [0159.409] GetDeviceDriverBaseNameA (in: ImageBase=0x8a0000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="framebuf.dll") returned 0xc [0159.409] GetDeviceDriverBaseNameA (in: ImageBase=0x3e84000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="mouhid.sys") returned 0xa [0159.410] GetDeviceDriverBaseNameA (in: ImageBase=0x3e91000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="luafv.sys") returned 0x9 [0159.410] GetDeviceDriverBaseNameA (in: ImageBase=0x19ab000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="lltdio.sys") returned 0xa [0159.411] GetDeviceDriverBaseNameA (in: ImageBase=0x19c0000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="rspndr.sys") returned 0xa [0159.411] GetDeviceDriverBaseNameA (in: ImageBase=0x3076000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="HTTP.sys") returned 0x8 [0159.411] GetDeviceDriverBaseNameA (in: ImageBase=0x313f000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="bowser.sys") returned 0xa [0159.412] GetDeviceDriverBaseNameA (in: ImageBase=0x315d000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="mpsdrv.sys") returned 0xa [0159.412] GetDeviceDriverBaseNameA (in: ImageBase=0x3175000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="mrxsmb.sys") returned 0xa [0159.413] GetDeviceDriverBaseNameA (in: ImageBase=0x31a2000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="mrxsmb10.sys") returned 0xc [0159.413] GetDeviceDriverBaseNameA (in: ImageBase=0x3000000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="mrxsmb20.sys") returned 0xc [0159.413] GetDeviceDriverBaseNameA (in: ImageBase=0x4255000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="peauth.sys") returned 0xa [0159.414] GetDeviceDriverBaseNameA (in: ImageBase=0x42ff000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="secdrv.SYS") returned 0xa [0159.414] GetDeviceDriverBaseNameA (in: ImageBase=0x430a000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="srvnet.sys") returned 0xa [0159.415] GetDeviceDriverBaseNameA (in: ImageBase=0x433b000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="tcpipreg.sys") returned 0xc [0159.415] GetDeviceDriverBaseNameA (in: ImageBase=0x434d000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="srv2.sys") returned 0x8 [0159.415] GetDeviceDriverBaseNameA (in: ImageBase=0x44a9000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="srv.sys") returned 0x7 [0159.416] GetDeviceDriverBaseNameA (in: ImageBase=0x4542000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="e1q60x64.sys") returned 0xc [0159.416] GetDeviceDriverBaseNameA (in: ImageBase=0x4582000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="spsys.sys") returned 0x9 [0159.417] GetDeviceDriverBaseNameA (in: ImageBase=0x45f3000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="asyncmac.sys") returned 0xc [0159.417] GetDeviceDriverBaseNameA (in: ImageBase=0x76f70000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="ntdll.dll") returned 0x9 [0159.418] GetDeviceDriverBaseNameA (in: ImageBase=0x47a10000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="smss.exe") returned 0x8 [0159.418] GetDeviceDriverBaseNameA (in: ImageBase=0xff290000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="apisetschema.dll") returned 0x10 [0159.418] GetDeviceDriverBaseNameA (in: ImageBase=0xff020000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="autochk.exe") returned 0xb [0159.419] GetDeviceDriverBaseNameA (in: ImageBase=0xff1e0000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="clbcatq.dll") returned 0xb [0159.419] GetDeviceDriverBaseNameA (in: ImageBase=0xff140000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="msvcrt.dll") returned 0xa [0159.420] GetDeviceDriverBaseNameA (in: ImageBase=0xfef30000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="ole32.dll") returned 0x9 [0159.420] GetDeviceDriverBaseNameA (in: ImageBase=0xfee20000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="msctf.dll") returned 0x9 [0159.420] GetDeviceDriverBaseNameA (in: ImageBase=0xfebc0000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="iertutil.dll") returned 0xc [0159.421] GetDeviceDriverBaseNameA (in: ImageBase=0xfebb0000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="lpk.dll") returned 0x7 [0159.421] GetDeviceDriverBaseNameA (in: ImageBase=0xfeb60000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="ws2_32.dll") returned 0xa [0159.422] GetDeviceDriverBaseNameA (in: ImageBase=0xfeb40000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="sechost.dll") returned 0xb [0159.422] GetDeviceDriverBaseNameA (in: ImageBase=0xfeac0000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="shlwapi.dll") returned 0xb [0159.422] GetDeviceDriverBaseNameA (in: ImageBase=0xfea90000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="imm32.dll") returned 0x9 [0159.423] GetDeviceDriverBaseNameA (in: ImageBase=0x77140000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="psapi.dll") returned 0x9 [0159.423] GetDeviceDriverBaseNameA (in: ImageBase=0xfe8b0000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="setupapi.dll") returned 0xc [0159.424] GetDeviceDriverBaseNameA (in: ImageBase=0x77130000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="normaliz.dll") returned 0xc [0159.424] GetDeviceDriverBaseNameA (in: ImageBase=0xfe7e0000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="usp10.dll") returned 0x9 [0159.424] GetDeviceDriverBaseNameA (in: ImageBase=0xfe770000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="gdi32.dll") returned 0x9 [0159.425] GetDeviceDriverBaseNameA (in: ImageBase=0xfe6d0000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="comdlg32.dll") returned 0xc [0159.425] GetDeviceDriverBaseNameA (in: ImageBase=0x76e50000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="kernel32.dll") returned 0xc [0159.426] GetDeviceDriverBaseNameA (in: ImageBase=0xfe5f0000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="oleaut32.dll") returned 0xc [0159.426] GetDeviceDriverBaseNameA (in: ImageBase=0xfe4c0000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="rpcrt4.dll") returned 0xa [0159.426] GetDeviceDriverBaseNameA (in: ImageBase=0xfe340000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="urlmon.dll") returned 0xa [0159.427] GetDeviceDriverBaseNameA (in: ImageBase=0x76d50000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="user32.dll") returned 0xa [0159.427] GetDeviceDriverBaseNameA (in: ImageBase=0xfe2e0000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="Wldap32.dll") returned 0xb [0159.428] GetDeviceDriverBaseNameA (in: ImageBase=0xfe2d0000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="nsi.dll") returned 0x7 [0159.428] GetDeviceDriverBaseNameA (in: ImageBase=0xfe2b0000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="imagehlp.dll") returned 0xc [0159.428] GetDeviceDriverBaseNameA (in: ImageBase=0xfe1d0000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="advapi32.dll") returned 0xc [0159.429] GetDeviceDriverBaseNameA (in: ImageBase=0xfe0a0000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="wininet.dll") returned 0xb [0159.429] GetDeviceDriverBaseNameA (in: ImageBase=0xfd310000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="shell32.dll") returned 0xb [0159.430] GetDeviceDriverBaseNameA (in: ImageBase=0xfd290000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="difxapi.dll") returned 0xb [0159.430] GetDeviceDriverBaseNameA (in: ImageBase=0xfd270000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="devobj.dll") returned 0xa [0159.431] GetDeviceDriverBaseNameA (in: ImageBase=0xfd230000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="wintrust.dll") returned 0xc [0159.431] GetDeviceDriverBaseNameA (in: ImageBase=0xfd1c0000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="KernelBase.dll") returned 0xe [0159.431] GetDeviceDriverBaseNameA (in: ImageBase=0xfd180000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="cfgmgr32.dll") returned 0xc [0159.432] GetDeviceDriverBaseNameA (in: ImageBase=0xfd0e0000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="comctl32.dll") returned 0xc [0159.432] GetDeviceDriverBaseNameA (in: ImageBase=0xfcf70000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="crypt32.dll") returned 0xb [0159.433] GetDeviceDriverBaseNameA (in: ImageBase=0xfcf60000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="msasn1.dll") returned 0xa [0159.433] GetDeviceDriverBaseNameA (in: ImageBase=0x76910000, lpFilename=0x2350000, nSize=0xff | out: lpFilename="normaliz.dll") returned 0xc [0159.442] LoadLibraryA (lpLibFileName="Msi.dll") returned 0x72790000 [0159.457] LoadLibraryA (lpLibFileName="Msi.dll") returned 0x72790000 [0159.521] MsiEnumProductsA (in: iProductIndex=0x1, lpProductBuf=0x2350000 | out: lpProductBuf="{90160000-008C-0409-0000-0000000FF1CE}") returned 0x0 [0159.553] MsiGetProductInfoA (in: szProduct="{90160000-008C-0409-0000-0000000FF1CE}", szAttribute="Publisher", lpValueBuf=0x23500ff, pcchValueBuf=0x18fde4 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x18fde4) returned 0xea [0159.572] MsiEnumProductsA (in: iProductIndex=0x2, lpProductBuf=0x2350000 | out: lpProductBuf="{90160000-008F-0000-1000-0000000FF1CE}") returned 0x0 [0159.609] MsiGetProductInfoA (in: szProduct="{90160000-008F-0000-1000-0000000FF1CE}", szAttribute="Publisher", lpValueBuf=0x23500ff, pcchValueBuf=0x18fde4 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x18fde4) returned 0xea [0159.627] MsiEnumProductsA (in: iProductIndex=0x3, lpProductBuf=0x2350000 | out: lpProductBuf="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}") returned 0x0 [0159.661] MsiGetProductInfoA (in: szProduct="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}", szAttribute="Publisher", lpValueBuf=0x23500ff, pcchValueBuf=0x18fde4 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x18fde4) returned 0xea [0159.679] MsiEnumProductsA (in: iProductIndex=0x4, lpProductBuf=0x2350000 | out: lpProductBuf="{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}") returned 0x0 [0159.713] MsiGetProductInfoA (in: szProduct="{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}", szAttribute="Publisher", lpValueBuf=0x23500ff, pcchValueBuf=0x18fde4 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x18fde4) returned 0xea [0159.731] MsiEnumProductsA (in: iProductIndex=0x5, lpProductBuf=0x2350000 | out: lpProductBuf="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}") returned 0x0 [0159.764] MsiGetProductInfoA (in: szProduct="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", szAttribute="Publisher", lpValueBuf=0x23500ff, pcchValueBuf=0x18fde4 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x18fde4) returned 0xea [0159.781] MsiEnumProductsA (in: iProductIndex=0x6, lpProductBuf=0x2350000 | out: lpProductBuf="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}") returned 0x0 [0159.815] MsiGetProductInfoA (in: szProduct="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", szAttribute="Publisher", lpValueBuf=0x23500ff, pcchValueBuf=0x18fde4 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x18fde4) returned 0xea [0159.832] MsiEnumProductsA (in: iProductIndex=0x7, lpProductBuf=0x2350000 | out: lpProductBuf="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}") returned 0x0 [0159.866] MsiGetProductInfoA (in: szProduct="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", szAttribute="Publisher", lpValueBuf=0x23500ff, pcchValueBuf=0x18fde4 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x18fde4) returned 0xea [0159.884] MsiEnumProductsA (in: iProductIndex=0x8, lpProductBuf=0x2350000 | out: lpProductBuf="{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}") returned 0x0 [0159.918] MsiGetProductInfoA (in: szProduct="{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}", szAttribute="Publisher", lpValueBuf=0x23500ff, pcchValueBuf=0x18fde4 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x18fde4) returned 0xea [0159.935] MsiEnumProductsA (in: iProductIndex=0x9, lpProductBuf=0x2350000 | out: lpProductBuf="{0FA68574-690B-4B00-89AA-B28946231449}") returned 0x0 [0159.979] MsiGetProductInfoA (in: szProduct="{0FA68574-690B-4B00-89AA-B28946231449}", szAttribute="Publisher", lpValueBuf=0x23500ff, pcchValueBuf=0x18fde4 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x18fde4) returned 0xea [0159.996] MsiEnumProductsA (in: iProductIndex=0xa, lpProductBuf=0x2350000 | out: lpProductBuf="{929FBD26-9020-399B-9A7A-751D61F0B942}") returned 0x0 [0160.028] MsiGetProductInfoA (in: szProduct="{929FBD26-9020-399B-9A7A-751D61F0B942}", szAttribute="Publisher", lpValueBuf=0x23500ff, pcchValueBuf=0x18fde4 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x18fde4) returned 0xea [0160.098] MsiEnumProductsA (in: iProductIndex=0xb, lpProductBuf=0x2350000 | out: lpProductBuf="{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}") returned 0x0 [0160.137] MsiGetProductInfoA (in: szProduct="{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}", szAttribute="Publisher", lpValueBuf=0x23500ff, pcchValueBuf=0x18fde4 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x18fde4) returned 0xea [0160.154] MsiEnumProductsA (in: iProductIndex=0xc, lpProductBuf=0x2350000 | out: lpProductBuf="{9BE518E6-ECC6-35A9-88E4-87755C07200F}") returned 0x0 [0160.188] MsiGetProductInfoA (in: szProduct="{9BE518E6-ECC6-35A9-88E4-87755C07200F}", szAttribute="Publisher", lpValueBuf=0x23500ff, pcchValueBuf=0x18fde4 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x18fde4) returned 0xea [0160.206] MsiEnumProductsA (in: iProductIndex=0xd, lpProductBuf=0x2350000 | out: lpProductBuf="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}") returned 0x0 [0160.246] MsiGetProductInfoA (in: szProduct="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}", szAttribute="Publisher", lpValueBuf=0x23500ff, pcchValueBuf=0x18fde4 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x18fde4) returned 0xea [0160.265] MsiEnumProductsA (in: iProductIndex=0xe, lpProductBuf=0x2350000 | out: lpProductBuf="{EEA66967-97E2-4561-A999-5C22E3CDE428}") returned 0x0 [0160.298] MsiGetProductInfoA (in: szProduct="{EEA66967-97E2-4561-A999-5C22E3CDE428}", szAttribute="Publisher", lpValueBuf=0x23500ff, pcchValueBuf=0x18fde4 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x18fde4) returned 0xea [0160.316] MsiEnumProductsA (in: iProductIndex=0xf, lpProductBuf=0x2350000 | out: lpProductBuf="{37B8F9C7-03FB-3253-8781-2517C99D7C00}") returned 0x0 [0160.348] MsiGetProductInfoA (in: szProduct="{37B8F9C7-03FB-3253-8781-2517C99D7C00}", szAttribute="Publisher", lpValueBuf=0x23500ff, pcchValueBuf=0x18fde4 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x18fde4) returned 0xea [0160.366] MsiEnumProductsA (in: iProductIndex=0x10, lpProductBuf=0x2350000 | out: lpProductBuf="{16735AF7-1D8D-3681-94A5-C578A61EC832}") returned 0x0 [0160.399] MsiGetProductInfoA (in: szProduct="{16735AF7-1D8D-3681-94A5-C578A61EC832}", szAttribute="Publisher", lpValueBuf=0x23500ff, pcchValueBuf=0x18fde4 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x18fde4) returned 0xea [0160.416] MsiEnumProductsA (in: iProductIndex=0x11, lpProductBuf=0x2350000 | out: lpProductBuf="{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned 0x0 [0160.450] MsiGetProductInfoA (in: szProduct="{9AC08E99-230B-47e8-9721-4577B7F124EA}", szAttribute="Publisher", lpValueBuf=0x23500ff, pcchValueBuf=0x18fde4 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x18fde4) returned 0x648 [0160.468] MsiEnumProductsA (in: iProductIndex=0x12, lpProductBuf=0x2350000 | out: lpProductBuf="{B175520C-86A2-35A7-8619-86DC379688B9}") returned 0x0 [0160.503] MsiGetProductInfoA (in: szProduct="{B175520C-86A2-35A7-8619-86DC379688B9}", szAttribute="Publisher", lpValueBuf=0x23500ff, pcchValueBuf=0x18fde4 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x18fde4) returned 0xea [0160.521] MsiEnumProductsA (in: iProductIndex=0x13, lpProductBuf=0x2350000 | out: lpProductBuf="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}") returned 0x0 [0160.554] MsiGetProductInfoA (in: szProduct="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", szAttribute="Publisher", lpValueBuf=0x23500ff, pcchValueBuf=0x18fde4 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x18fde4) returned 0xea [0160.573] MsiEnumProductsA (in: iProductIndex=0x14, lpProductBuf=0x2350000 | out: lpProductBuf="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}") returned 0x0 [0160.619] MsiGetProductInfoA (in: szProduct="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}", szAttribute="Publisher", lpValueBuf=0x23500ff, pcchValueBuf=0x18fde4 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x18fde4) returned 0xea [0160.637] MsiEnumProductsA (in: iProductIndex=0x15, lpProductBuf=0x2350000 | out: lpProductBuf="{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}") returned 0x0 [0160.671] MsiGetProductInfoA (in: szProduct="{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}", szAttribute="Publisher", lpValueBuf=0x23500ff, pcchValueBuf=0x18fde4 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x18fde4) returned 0xea [0160.689] MsiEnumProductsA (in: iProductIndex=0x16, lpProductBuf=0x2350000 | out: lpProductBuf="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}") returned 0x0 [0160.722] MsiGetProductInfoA (in: szProduct="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", szAttribute="Publisher", lpValueBuf=0x23500ff, pcchValueBuf=0x18fde4 | out: lpValueBuf="Microsoft Corporation", pcchValueBuf=0x18fde4) returned 0xea [0160.741] MsiEnumProductsA (in: iProductIndex=0x17, lpProductBuf=0x2350000 | out: lpProductBuf="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}") returned 0x103 [0160.775] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0160.781] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0160.782] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0160.792] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0160.793] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0160.794] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0160.794] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0160.794] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0160.813] LoadLibraryA (lpLibFileName="kernel32") returned 0x75620000 [0160.814] LoadLibraryA (lpLibFileName="kernel32") returned 0x75620000 [0160.814] LoadLibraryA (lpLibFileName="kernel32") returned 0x75620000 [0160.815] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0160.833] LoadLibraryA (lpLibFileName="kernel32") returned 0x75620000 [0160.834] LoadLibraryA (lpLibFileName="kernel32") returned 0x75620000 [0160.840] LoadLibraryA (lpLibFileName="kernel32") returned 0x75620000 [0160.846] LoadLibraryA (lpLibFileName="kernel32") returned 0x75620000 [0160.852] LoadLibraryA (lpLibFileName="kernel32") returned 0x75620000 [0160.873] LoadLibraryA (lpLibFileName="kernel32") returned 0x75620000 [0160.874] LoadLibraryA (lpLibFileName="kernel32") returned 0x75620000 [0160.880] LoadLibraryA (lpLibFileName="shell32") returned 0x75730000 [0160.895] LoadLibraryA (lpLibFileName="shell32") returned 0x75730000 [0160.901] LoadLibraryA (lpLibFileName="advapi32") returned 0x767e0000 [0160.912] LoadLibraryA (lpLibFileName="advapi32") returned 0x767e0000 [0160.925] LoadLibraryA (lpLibFileName="advapi32") returned 0x767e0000 [0160.932] OpenSCManagerA (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0xaaefe8 [0160.940] LoadLibraryA (lpLibFileName="advapi32") returned 0x767e0000 [0160.952] EnumServicesStatusA (in: hSCManager=0xaaefe8, dwServiceType=0x30, dwServiceState=0x3, lpServices=0x235000c, cbBufSize=0x3e800, pcbBytesNeeded=0x2350008, lpServicesReturned=0x2350004, lpResumeHandle=0x2350000 | out: lpServices=0x235000c*(lpServiceName="AeLookupSvc", lpDisplayName="Application Experience", ServiceStatus.dwServiceType=0x20, ServiceStatus.dwCurrentState=0x1, ServiceStatus.dwControlsAccepted=0x0, ServiceStatus.dwWin32ExitCode=0x435, ServiceStatus.dwServiceSpecificExitCode=0x0, ServiceStatus.dwCheckPoint=0x0, ServiceStatus.dwWaitHint=0x0), pcbBytesNeeded=0x2350008, lpServicesReturned=0x2350004, lpResumeHandle=0x2350000) returned 1 [0160.985] LoadLibraryA (lpLibFileName="advapi32") returned 0x767e0000 [0160.986] CloseServiceHandle (hSCObject=0xaaefe8) returned 1 [0160.999] LoadLibraryA (lpLibFileName="ntdll") returned 0x77150000 [0161.056] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x18fdf0*=0x401000, NumberOfBytesToProtect=0x18fdec, NewAccessProtection=0x4, OldAccessProtection=0x18fd88 | out: BaseAddress=0x18fdf0*=0x401000, NumberOfBytesToProtect=0x18fdec, OldAccessProtection=0x18fd88*=0x20) returned 0x0 [0161.289] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x18fdf0*=0x77252000, NumberOfBytesToProtect=0x18fdec, NewAccessProtection=0x4, OldAccessProtection=0x18fd88 | out: BaseAddress=0x18fdf0*=0x77252000, NumberOfBytesToProtect=0x18fdec, OldAccessProtection=0x18fd88*=0x4) returned 0x0 [0161.290] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x76b70000 [0161.294] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x76b70000 [0161.295] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x76b70000 [0161.295] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x76b70000 [0161.295] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x76b70000 [0161.322] InternetOpenA (lpszAgent="Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0162.391] InternetSetOptionA (hInternet=0xcc0004, dwOption=0x2, lpBuffer=0x1bd68d*, dwBufferLength=0x4) returned 1 [0162.392] InternetOpenUrlA (hInternet=0xcc0004, lpszUrl="https://drive.google.com/uc?export=download&id=1SrbfkJ9_Bx7Q9qhzb5JeLy5TlBRjWwjF", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x84000100, dwContext=0x0) returned 0xcc000c [0170.288] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x2350000, dwNumberOfBytesToRead=0x10000, lpdwNumberOfBytesRead=0x18fddc | out: lpBuffer=0x2350000*, lpdwNumberOfBytesRead=0x18fddc*=0x10000) returned 1 [0170.340] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x2360000, dwNumberOfBytesToRead=0x10000, lpdwNumberOfBytesRead=0x18fddc | out: lpBuffer=0x2360000*, lpdwNumberOfBytesRead=0x18fddc*=0xa040) returned 1 [0170.370] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x236a040, dwNumberOfBytesToRead=0x10000, lpdwNumberOfBytesRead=0x18fddc | out: lpBuffer=0x236a040*, lpdwNumberOfBytesRead=0x18fddc*=0x0) returned 1 [0170.370] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0170.371] InternetCloseHandle (hInternet=0xcc000c) returned 0 [0170.420] LoadLibraryA (lpLibFileName="kernel32") returned 0x75620000 [0170.436] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x2340800*=0x400000, NumberOfBytesToProtect=0x2340808, NewAccessProtection=0x4, OldAccessProtection=0x18fd88 | out: BaseAddress=0x2340800*=0x400000, NumberOfBytesToProtect=0x2340808, OldAccessProtection=0x18fd88*=0x2) returned 0x0 [0170.458] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x76920000 [0170.458] GetProcAddress (hModule=0x76920000, lpProcName="getaddrinfo") returned 0x76924296 [0170.459] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x76920000 [0170.459] GetProcAddress (hModule=0x76920000, lpProcName="freeaddrinfo") returned 0x76924b1b [0170.459] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x76920000 [0170.460] GetProcAddress (hModule=0x76920000, lpProcName=0x3) returned 0x76923918 [0170.460] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x76920000 [0170.460] GetProcAddress (hModule=0x76920000, lpProcName=0x73) returned 0x76923ab2 [0170.461] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x76920000 [0170.461] GetProcAddress (hModule=0x76920000, lpProcName=0x17) returned 0x76923eb8 [0170.461] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x76920000 [0170.462] GetProcAddress (hModule=0x76920000, lpProcName=0x13) returned 0x76926f01 [0170.462] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x76920000 [0170.462] GetProcAddress (hModule=0x76920000, lpProcName=0x10) returned 0x76926b0e [0170.462] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x76920000 [0170.463] GetProcAddress (hModule=0x76920000, lpProcName=0x4) returned 0x76926bdd [0170.463] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x75620000 [0170.464] GetProcAddress (hModule=0x75620000, lpProcName="GetProcessHeap") returned 0x756314c9 [0170.464] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x75620000 [0170.464] GetProcAddress (hModule=0x75620000, lpProcName="HeapFree") returned 0x756314a9 [0170.464] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x75620000 [0170.465] GetProcAddress (hModule=0x75620000, lpProcName="HeapAlloc") returned 0x7717e026 [0170.465] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x75620000 [0170.466] GetProcAddress (hModule=0x75620000, lpProcName="SetLastError") returned 0x756311a9 [0170.466] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x75620000 [0170.466] GetProcAddress (hModule=0x75620000, lpProcName="GetLastError") returned 0x756311c0 [0170.467] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x75370000 [0170.467] GetProcAddress (hModule=0x75370000, lpProcName="CoCreateInstance") returned 0x753b9d0b [0170.467] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x75370000 [0170.467] GetProcAddress (hModule=0x75370000, lpProcName="CoInitialize") returned 0x7538b636 [0170.468] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x75370000 [0170.468] GetProcAddress (hModule=0x75370000, lpProcName="CoUninitialize") returned 0x753b86d3 [0170.469] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x76a50000 [0170.469] GetProcAddress (hModule=0x76a50000, lpProcName=0x8) returned 0x76a53ed5 [0170.469] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x76a50000 [0170.469] GetProcAddress (hModule=0x76a50000, lpProcName=0x6) returned 0x76a53e59 [0170.470] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x76a50000 [0170.470] GetProcAddress (hModule=0x76a50000, lpProcName=0x2) returned 0x76a54642 [0170.476] RtlAddVectoredExceptionHandler (FirstHandler=0x1, VectoredHandler=0x1c27b7) returned 0x1c2fe3b8 [0170.482] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x4) returned 0x0 [0170.494] NtCreateThreadEx (in: ThreadHandle=0x18fd88, DesiredAccess=0x1fffff, ObjectAttributes=0x0, ProcessHandle=0xffffffff, lpStartAddress=0x1bc0a7, lpParameter=0x0, CreateSuspended=1, StackZeroBits=0x0, SizeOfStackCommit=0x0, SizeOfStackReserve=0x0, lpBytesBuffer=0x0 | out: ThreadHandle=0x18fd88*=0x2a0, lpBytesBuffer=0x0) returned 0x0 [0170.494] Sleep (dwMilliseconds=0x800) [0172.995] NtCreateThreadEx (in: ThreadHandle=0x18fd88, DesiredAccess=0x1fffff, ObjectAttributes=0x0, ProcessHandle=0xffffffff, lpStartAddress=0x1c260b, lpParameter=0x0, CreateSuspended=1, StackZeroBits=0x0, SizeOfStackCommit=0x0, SizeOfStackReserve=0x0, lpBytesBuffer=0x0 | out: ThreadHandle=0x18fd88*=0xfc, lpBytesBuffer=0x0) returned 0x0 [0172.999] TerminateThread (hThread=0xfffffffe, dwExitCode=0x0) Thread: id = 7 os_tid = 0xa90 Thread: id = 8 os_tid = 0xa94 Thread: id = 9 os_tid = 0xa98 Thread: id = 10 os_tid = 0xa9c Thread: id = 11 os_tid = 0xaa0 Thread: id = 46 os_tid = 0xab0 [0170.501] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0170.783] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0170.800] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0170.816] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0170.832] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0170.847] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0170.859] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0170.872] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x414000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x414000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0171.102] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0171.113] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0171.123] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x406000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x406000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0171.142] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0171.370] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x409000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x409000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0171.612] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x416000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x416000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0171.628] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40c000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40c000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0171.928] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x407000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x407000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0172.380] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x408000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x408000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0173.451] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x408000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x408000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0174.711] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0174.735] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0174.751] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0174.762] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x408000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x408000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0174.786] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x408000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x408000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0174.802] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0174.837] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x408000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x408000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.083] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.105] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x408000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x408000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.137] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.149] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.162] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.174] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.191] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.203] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.214] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x408000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x408000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.225] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.242] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x408000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x408000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.253] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.531] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.548] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.563] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.586] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.603] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.627] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.642] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.659] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.683] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.699] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.734] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.750] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.765] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.794] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.810] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.833] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.845] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.857] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.874] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.885] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.897] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.919] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.930] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.940] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.951] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.971] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.982] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.992] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.003] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.032] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.043] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.060] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.072] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.084] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.096] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.125] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.141] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.165] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.181] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.207] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.222] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.233] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.254] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.265] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.276] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.287] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.304] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.315] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x408000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x408000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.326] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.342] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x408000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x408000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.353] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.363] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.374] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.391] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.403] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.413] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.425] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x408000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x408000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.450] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.467] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.491] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.507] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.532] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.558] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40c000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40c000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.917] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.933] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.021] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.037] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.053] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.084] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.100] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.124] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.140] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.164] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.179] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.203] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.222] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.238] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.262] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.279] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.301] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.317] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.333] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.353] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.365] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.402] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.419] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.444] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.463] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.490] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.505] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.522] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.532] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.549] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.560] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.573] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.592] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.610] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.626] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.650] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.666] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.690] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.706] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.721] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.745] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.761] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.809] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.825] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.839] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.864] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.879] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.894] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.920] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.936] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.959] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.006] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.023] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.048] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.064] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.075] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.093] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.116] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.137] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.152] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.167] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.191] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.208] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.235] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.252] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.265] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.282] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.293] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.313] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.338] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.353] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.378] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.394] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x416000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x416000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.409] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.433] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.449] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.473] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.489] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.514] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.530] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.546] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.570] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.587] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.612] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.628] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.643] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.667] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.683] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.708] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.724] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.748] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.764] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.781] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.820] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.835] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.861] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.877] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.893] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.916] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.931] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.956] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.971] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.000] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.015] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.031] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.057] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.073] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.097] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.124] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.140] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.158] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x416000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x416000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.175] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.192] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.211] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40c000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40c000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.226] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.242] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.257] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x409000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x409000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.634] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.654] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.700] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.716] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.732] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.743] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.759] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.770] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.780] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.797] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.807] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.840] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.851] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.867] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.877] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.888] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.898] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.909] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.919] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x416000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x416000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.930] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x409000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x409000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.940] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.950] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.960] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.970] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.982] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40d000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40d000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.226] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.237] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.248] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.265] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.295] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.307] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.318] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.335] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.346] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.359] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.372] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.392] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.409] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.435] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.451] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.468] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.540] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.556] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.582] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.598] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.624] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.641] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.666] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.682] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.698] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.722] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.738] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.763] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.780] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.794] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.813] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.825] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.837] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.854] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.865] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.876] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.888] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.914] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.929] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.940] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.951] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.969] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.981] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.992] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.009] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.021] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.032] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.045] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.063] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.075] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.089] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.106] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.120] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.130] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.147] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.158] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.169] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.180] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.198] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.209] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.220] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.231] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.248] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.258] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.269] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.286] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.299] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.314] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.326] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40d000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40d000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.343] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.353] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.365] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.383] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.394] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.405] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x410000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x410000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.416] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.433] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.446] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.457] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.480] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.491] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.502] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.513] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.532] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.542] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.553] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.570] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.581] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.592] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.603] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.619] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.630] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.641] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.653] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.674] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.689] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.704] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.727] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.744] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.771] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.782] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.793] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.811] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.822] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.834] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.858] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.874] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.899] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.925] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.949] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.962] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.997] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.008] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.022] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.044] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.056] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.067] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.085] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.098] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.109] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.120] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.139] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.151] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.162] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.179] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.190] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.206] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.230] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.244] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.256] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.275] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.287] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.302] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.324] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.336] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.352] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.376] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.392] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.416] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.427] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.439] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.458] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.475] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.487] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.505] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.517] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.528] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.541] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.560] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.574] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.586] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.606] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.618] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.632] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.656] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.672] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.698] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.714] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.730] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.749] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.764] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.790] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.802] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.813] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.841] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.852] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.864] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.880] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.893] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.904] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.915] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.932] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.944] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.955] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.971] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.983] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.994] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.020] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.031] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.042] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.054] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.071] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.086] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.102] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x410000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x410000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.128] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.156] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.178] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.189] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.210] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.229] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.240] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.250] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.269] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.280] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.291] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.302] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.320] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.334] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.345] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.362] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.373] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.384] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.410] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.422] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.434] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.461] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.487] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.514] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.529] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.543] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.569] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.584] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.608] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.624] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.663] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.679] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.705] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.721] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.746] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.762] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.787] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.803] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.820] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.844] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.860] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.883] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.899] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.916] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.940] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.955] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.978] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.993] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.022] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.045] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.061] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.085] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.100] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.119] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.145] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.161] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.183] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.193] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.203] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.214] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.225] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.235] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.245] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.257] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.267] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.291] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.319] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.336] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.353] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.365] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.378] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.396] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.407] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.420] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.437] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.448] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.460] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.471] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.491] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.503] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.515] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.533] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.544] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.555] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.566] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.587] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.598] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.610] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.628] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.639] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.650] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.660] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.677] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.688] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.700] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.711] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.730] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.741] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.753] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.770] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.781] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.792] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.803] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.826] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.844] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.871] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.884] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.895] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.912] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.925] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.936] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.955] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.966] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.982] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.999] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.022] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.037] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.062] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.077] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.100] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.118] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.134] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.153] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.165] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.176] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.192] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.203] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.215] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.244] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.255] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.266] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.283] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.294] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.307] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.318] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.335] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.346] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.361] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.387] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.403] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.427] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.442] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.458] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.484] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.500] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.526] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.543] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.566] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.631] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.647] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.671] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.687] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.710] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.729] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.755] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.772] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.786] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.812] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.854] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.870] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.895] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.910] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.924] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.941] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.952] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.963] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.975] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.992] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0186.002] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0186.014] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0186.031] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0186.042] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0186.054] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0186.089] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0186.203] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0186.431] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.438] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.452] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.469] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.496] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.512] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.543] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.558] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.581] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.600] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.615] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.638] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.655] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.677] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.690] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.705] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.728] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.743] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.767] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.788] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.802] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.816] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.839] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.853] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.878] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.898] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.923] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.937] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.952] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.975] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.990] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.015] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.029] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.044] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.066] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.084] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.108] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.123] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.135] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.157] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.171] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.187] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.210] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.226] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.248] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.262] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.278] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.301] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.316] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.330] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.352] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.366] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.390] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.407] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.422] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.465] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.491] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.502] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.520] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.531] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.562] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.574] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.586] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.813] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.849] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.900] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.938] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0189.834] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0189.871] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0189.948] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0190.857] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0190.925] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0190.999] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0191.058] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0191.087] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0191.110] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0191.144] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0191.172] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.276] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.323] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.417] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.466] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.492] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.566] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.757] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.772] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.787] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.809] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.825] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.848] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.862] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.876] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.899] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.919] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.933] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.957] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.971] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.997] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.012] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.284] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.300] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.315] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.337] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.350] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.366] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.390] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.404] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.427] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.442] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.457] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.493] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x410000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x410000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.507] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.530] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.555] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.570] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.593] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.607] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.630] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.644] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.656] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.674] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.686] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.699] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.721] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.734] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.750] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.772] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.787] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.801] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.823] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.838] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.853] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.877] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.891] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.914] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.931] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.944] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.966] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.981] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.006] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.020] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.034] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.058] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.072] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.113] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.127] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.138] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.156] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.167] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.178] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.189] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.209] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.220] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.249] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.260] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.271] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.282] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.308] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.318] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.329] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.346] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.357] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.370] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.384] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.401] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.413] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.425] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.444] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.455] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.466] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.483] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.494] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.505] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.515] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.533] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.543] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.562] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.578] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.589] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.599] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.610] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.628] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.639] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.650] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.662] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.683] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.693] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.705] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.722] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.733] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.745] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.756] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.775] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.786] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.797] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.814] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.825] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.836] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.847] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.864] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.875] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.886] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.978] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.989] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.000] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.010] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.038] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.048] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.060] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.077] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.088] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.099] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.109] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.174] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.184] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.195] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.208] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.229] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.240] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.250] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x410000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x410000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.269] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.281] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.308] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.319] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.330] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.341] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.366] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.376] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.387] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.404] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.415] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.425] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.438] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.455] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.466] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.477] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.488] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.504] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.515] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.526] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.543] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.553] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.564] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.575] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.593] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.604] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.615] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.626] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.642] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.653] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.664] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.675] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.693] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.704] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.714] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.731] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.741] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.752] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.762] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.779] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.791] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.803] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.814] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.841] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.852] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.870] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.881] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.892] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.903] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.922] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.932] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.943] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.953] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.970] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.981] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.992] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.015] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.031] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.047] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.070] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.086] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.107] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.122] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.133] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.143] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.162] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.173] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.183] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.202] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.213] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.225] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.236] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.252] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.275] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.287] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.312] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.322] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.333] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.343] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.360] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.380] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.391] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.404] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.420] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.431] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.442] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.453] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.471] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.482] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.493] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.503] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.522] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.534] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.545] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.561] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.572] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.583] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.594] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.611] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.633] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.643] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.661] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.672] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.683] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.700] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.711] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.723] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.734] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.750] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.768] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.778] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.796] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.806] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.817] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.828] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.844] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.855] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.865] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.876] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.893] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.903] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.915] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.931] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.942] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.952] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.964] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.980] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.992] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.002] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.015] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.032] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.043] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.055] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.072] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.083] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.094] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.129] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.139] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.150] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.167] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.177] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.189] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.201] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.217] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.248] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.279] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.299] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.328] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.347] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.396] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.414] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.435] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.452] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.463] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.481] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.492] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.502] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.516] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.533] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.545] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.556] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.575] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.586] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.597] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.607] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.624] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.634] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.665] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.676] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.686] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.696] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.715] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.725] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.736] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.747] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.764] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.775] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.786] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.798] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.815] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.826] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.837] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.860] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.875] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.890] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.914] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.928] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.950] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.963] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.985] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.002] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.012] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.023] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.041] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.052] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.063] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.074] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.092] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.103] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.119] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.137] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.149] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.159] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.172] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.190] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.201] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.212] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.230] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.242] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.265] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.283] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.296] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.307] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.325] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.335] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x410000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x410000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.346] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.371] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.382] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.392] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.403] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.423] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.434] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.444] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.467] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.478] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.490] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.514] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.528] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.539] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.567] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.581] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.595] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.617] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.632] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.655] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.670] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.685] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.707] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.722] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.744] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.767] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.782] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.808] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.823] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.845] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.860] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.879] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.902] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.918] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.933] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.957] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.971] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.997] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.012] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.026] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.049] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.062] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.078] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.099] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.119] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.133] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.155] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.169] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.183] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.204] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.218] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.255] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.269] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.291] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.305] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.319] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.341] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.364] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.378] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.402] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.418] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.432] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.464] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.493] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.513] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.528] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.544] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.568] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.581] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.603] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.616] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.630] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.651] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.666] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.680] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.701] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.716] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.741] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.765] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.780] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.794] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.816] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.852] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.866] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.881] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.901] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.913] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.923] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.934] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.951] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.961] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.972] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.002] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.014] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.025] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.036] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.056] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.066] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.077] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.088] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.154] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.165] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.176] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.195] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.206] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.221] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.243] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.258] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.272] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.293] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.307] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.320] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.343] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.357] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.372] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.395] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.410] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.434] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.448] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.462] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.484] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.498] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.512] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.534] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.556] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.570] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x410000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x410000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.591] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.605] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.619] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.644] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.658] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.680] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.694] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.708] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.730] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.744] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.759] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.782] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.796] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.810] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.844] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.866] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.877] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.887] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.898] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.915] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.927] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.938] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.958] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.968] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.979] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.990] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.010] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.024] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.039] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.060] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.071] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.082] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.098] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.113] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.124] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.135] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.156] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.166] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.177] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.194] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.205] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.215] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.226] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.242] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.255] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.267] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.288] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.299] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.309] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.320] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.341] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.352] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.363] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.381] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.392] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.402] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.413] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.432] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.443] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.453] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.471] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.481] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.492] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.503] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.521] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.532] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.543] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.553] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.570] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.581] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.592] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.603] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.631] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.643] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.655] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.665] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.682] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.692] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.703] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.720] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.731] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.744] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.763] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.786] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.796] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.807] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x410000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x410000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.824] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.836] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.847] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.864] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.875] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.886] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40e000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40e000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.897] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.915] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.926] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.936] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.948] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.971] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.982] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.993] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.004] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.016] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.028] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.039] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.055] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.065] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.076] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.087] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.114] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.129] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.146] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.157] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.168] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.179] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.196] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.206] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.217] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.228] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.245] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.256] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.266] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.283] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.294] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.304] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.315] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.331] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.342] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.353] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.390] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.401] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.412] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.428] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.439] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.457] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.473] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.484] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.494] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.507] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.524] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.535] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.547] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40e000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40e000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.564] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40e000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40e000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.575] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.587] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.598] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.615] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.626] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x410000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x410000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.637] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.647] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.674] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.685] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.696] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x410000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x410000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.712] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.723] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.733] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.750] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.761] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.772] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.784] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.801] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.811] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.822] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.833] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.849] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.861] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.871] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.883] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.901] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.912] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.937] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.955] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.967] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.978] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.989] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.008] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.019] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.030] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.048] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.060] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.071] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.081] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.102] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.113] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.128] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.145] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.157] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.168] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.180] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x418000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.197] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.208] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.220] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.236] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.248] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.260] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.271] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.289] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.302] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.313] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.334] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.350] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.367] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.390] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.406] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.430] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.446] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.463] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.487] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.503] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.526] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.542] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.568] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.583] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.600] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.624] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.640] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.675] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.690] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.705] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.729] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.744] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.770] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.785] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.801] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.824] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.839] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.885] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.901] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.929] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.943] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.960] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.987] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.002] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.025] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.040] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.065] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.080] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.095] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.133] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.149] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.174] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.189] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.204] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.228] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.245] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.268] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.283] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.299] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.323] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.336] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.350] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.368] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.379] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.390] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x410000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x410000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.407] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x410000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x410000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.418] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.429] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.440] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.458] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.469] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x410000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x410000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.490] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.507] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.521] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.534] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.551] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.563] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.575] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.591] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.602] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.613] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.624] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.643] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.654] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.665] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.675] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.692] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.703] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.714] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.731] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.753] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.765] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.781] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.792] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.802] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.813] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.841] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.851] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.874] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.885] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.896] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.907] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.933] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.944] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.955] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.967] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.984] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.994] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.005] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.016] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.032] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.042] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.053] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.063] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.079] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.090] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.100] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.111] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.172] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.182] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.193] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.203] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.219] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.243] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.255] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.272] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.283] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.295] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.315] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.326] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.338] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.349] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.366] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.388] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.405] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.417] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.428] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.440] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.461] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.477] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.499] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.513] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.528] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.551] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.566] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.580] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.601] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.613] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.624] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.641] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.656] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.668] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.689] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.700] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.711] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.721] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.738] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.749] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.767] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.785] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.798] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.810] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.827] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.838] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.855] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.872] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.884] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.899] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.933] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.948] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.959] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.972] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.997] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.008] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.018] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.046] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.057] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.068] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.080] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.097] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.109] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.123] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.141] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.152] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.163] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.174] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.193] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.204] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.217] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.235] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.245] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.258] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.286] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.305] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.334] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.353] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.382] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.399] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.410] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.422] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.444] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.462] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.490] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.509] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.539] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.550] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.561] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.577] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.588] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.599] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.610] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.627] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.637] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.669] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.682] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.694] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.707] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.729] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.740] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.751] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.767] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.777] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.790] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.806] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.817] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.827] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.838] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.865] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.875] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.886] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.903] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.915] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.926] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.937] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.956] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.970] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.981] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.000] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.011] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.022] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.033] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.051] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.062] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.073] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.090] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.101] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.112] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.125] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.142] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.154] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.165] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.182] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.193] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.204] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.215] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.234] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.247] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.262] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.279] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.291] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.304] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.322] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.333] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.344] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.355] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.373] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.384] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.394] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.407] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.424] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.436] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.449] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.465] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.478] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.489] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.501] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.518] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.529] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.543] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.560] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.571] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.583] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.593] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.611] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.634] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.651] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.663] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.674] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.686] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.704] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.716] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.727] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.746] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.760] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.771] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.790] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.802] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.812] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.824] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.840] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.851] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.862] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.874] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.891] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.903] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.922] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.939] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.950] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.962] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.978] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.989] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.999] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.011] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.028] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.039] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.049] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.060] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.076] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.087] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.098] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.109] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.129] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.144] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.154] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.171] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.181] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.192] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.203] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.220] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.230] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.240] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.257] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.268] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.278] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.289] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.307] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.318] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.329] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.339] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.356] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.367] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.378] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.390] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.408] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.418] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.429] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.445] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.978] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.993] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.015] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.030] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.045] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.068] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.084] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.108] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.123] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.137] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.161] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.178] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.200] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.215] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.231] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.253] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.269] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.291] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.306] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.321] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.345] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.360] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.374] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.398] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.412] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.440] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.454] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.477] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.492] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.508] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.531] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.545] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.560] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.584] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.601] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.618] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.629] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.640] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.651] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.668] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.679] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.690] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.701] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.719] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.730] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.740] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.756] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.767] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.777] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.788] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.808] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.818] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.829] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.839] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.856] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.867] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.877] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.894] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.905] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.916] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.928] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.949] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.963] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.978] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.001] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.017] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.050] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.067] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.092] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.108] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.123] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.141] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.152] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.168] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.200] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.213] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.231] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.243] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.253] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.272] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.284] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.294] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.305] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.322] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.344] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.354] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.371] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.382] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.393] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.422] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.433] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.444] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.465] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.476] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.487] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.511] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.522] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.533] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.549] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.561] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.572] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.584] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.658] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.669] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.681] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.704] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.719] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.744] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.759] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.774] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.797] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.812] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.835] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.850] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.865] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.888] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.903] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.918] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.941] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.956] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.979] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.993] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.008] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.031] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.046] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.072] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.087] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.103] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.126] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.150] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.164] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.188] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.203] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.225] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.240] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.255] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.278] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.293] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.308] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.329] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.344] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.366] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.381] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.397] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.429] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.444] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.459] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.481] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.496] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.512] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.535] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.550] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.573] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.589] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.614] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.629] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.645] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.668] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.683] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.708] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.723] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.738] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.761] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.777] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.792] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.815] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.833] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.856] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.871] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.886] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.909] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.923] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.946] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.961] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.977] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.999] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.014] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.029] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.052] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.069] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.092] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.107] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.130] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.145] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.161] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.192] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.207] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.221] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.244] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.258] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.274] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.297] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.312] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.334] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.351] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.367] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.390] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.419] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.445] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.462] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.477] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.501] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.515] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.540] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.555] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.570] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.593] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.611] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.634] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.651] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.674] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.689] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.702] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.724] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.741] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.756] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.779] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.793] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.818] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.834] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.850] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.873] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.889] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.911] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.926] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.943] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.964] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.980] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.002] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.018] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.034] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.056] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.071] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.087] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.110] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.125] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.151] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.166] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.181] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.214] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.229] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.254] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.269] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.283] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.305] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.320] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.334] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.359] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.374] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.396] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.429] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.445] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.469] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.483] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.506] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.522] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.538] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.562] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.576] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.600] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.615] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.631] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.666] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.687] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.702] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.718] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.743] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.758] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.774] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.799] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.812] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.832] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.847] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.863] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.885] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.900] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.922] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.938] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.952] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.975] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.989] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.004] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.024] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.039] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.062] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.076] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.099] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.113] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.128] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.152] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.167] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.190] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.205] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.219] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.252] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.267] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.290] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.312] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.342] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.357] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.373] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.398] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.416] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.445] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.460] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.473] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.499] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.513] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.535] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.550] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.565] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.589] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.611] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.638] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.653] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.675] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.690] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.705] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.728] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.743] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.766] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.781] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.795] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.818] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.834] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.859] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.880] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.891] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.908] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.919] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.931] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.942] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.960] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.970] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.981] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.997] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.009] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.020] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.030] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.049] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.062] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.073] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.091] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.101] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.113] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.123] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.142] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.153] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.164] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.175] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.192] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.204] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.215] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.243] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.254] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.265] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.276] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.302] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.313] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.324] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.342] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.353] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.364] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.375] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.393] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.405] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.416] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.434] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.446] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.457] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.469] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.486] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.497] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.507] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.518] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.535] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.555] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.567] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.578] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.644] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.667] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.693] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.712] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.737] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.752] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.765] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.782] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.793] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.805] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.816] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.833] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.845] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.856] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.873] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.884] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.895] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.907] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.923] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.935] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.946] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.963] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.984] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.995] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.013] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.023] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.034] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.045] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.061] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.072] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.082] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.093] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.109] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.120] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.132] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.143] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.159] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.171] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.186] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.212] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.224] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.235] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.261] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.273] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.284] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.294] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.311] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.322] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.333] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.347] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.365] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.376] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.388] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.407] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.424] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.437] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.448] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.467] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.489] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.500] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.516] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.528] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.540] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.558] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.570] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.581] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.591] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.609] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.620] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.632] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.649] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.661] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.671] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.682] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.700] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.711] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.722] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.732] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.749] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.761] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.772] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.782] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.799] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.809] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.822] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.839] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.851] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.863] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.874] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.890] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.901] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.911] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.930] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.946] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.961] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.988] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.003] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.018] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.044] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.058] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.082] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.097] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.112] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.135] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.150] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.173] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.187] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.203] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.225] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.250] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.265] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.284] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.296] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.307] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.323] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.335] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.346] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.358] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.380] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.401] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.423] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.439] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.455] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.494] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.517] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.532] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.549] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.572] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.587] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.615] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.631] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.654] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.669] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.683] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.705] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.720] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.735] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.757] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.771] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.794] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.811] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.827] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.851] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.866] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.889] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.904] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.919] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.942] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.957] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.980] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.995] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.011] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.035] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.050] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.074] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.090] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.136] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.151] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.166] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.188] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.203] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.219] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.244] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.259] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.281] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.296] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.311] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.344] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.359] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.374] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.399] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.414] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.438] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.455] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.469] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.492] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.508] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.531] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.548] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.563] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.588] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.606] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.618] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.636] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.646] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.657] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.669] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.687] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.697] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.708] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.724] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.735] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.746] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.757] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.773] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.784] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.795] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.806] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.822] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.836] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.848] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.865] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.876] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.887] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.898] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.914] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.925] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.936] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.948] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.964] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.975] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.986] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.997] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.015] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.025] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.036] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.052] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.063] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.073] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.084] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.101] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.112] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.122] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.145] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.155] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.166] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.176] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.193] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.203] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.214] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.224] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.242] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.253] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.263] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.274] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.291] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.301] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.312] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.323] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.349] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.359] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.370] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.386] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.397] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.407] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.418] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.435] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.446] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.460] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.485] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.497] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.507] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.523] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.534] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.544] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.555] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.571] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.582] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.595] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.606] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.633] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.644] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.660] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.672] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.683] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.694] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.710] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.721] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.731] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.743] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.760] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.770] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.781] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.791] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.809] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.820] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.831] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.848] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.858] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.870] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.881] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.898] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.909] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.919] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.930] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.946] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.957] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.968] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.979] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.995] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.006] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.017] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.027] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.043] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.054] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.064] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.075] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.091] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.101] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.112] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.128] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.139] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.150] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.160] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.176] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.187] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.198] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.209] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.225] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.236] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.246] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.257] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.273] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.284] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.295] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.306] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.323] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.342] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.353] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.370] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.381] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.392] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.409] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.420] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.432] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.449] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.460] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.477] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.488] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.506] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.519] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.531] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.550] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.561] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.572] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.583] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.605] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.615] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.626] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.673] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.684] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.695] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.712] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.730] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.741] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.752] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.769] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.779] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.790] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.801] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.818] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.829] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.840] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.850] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.866] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.877] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.888] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.899] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.916] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.926] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.195] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.211] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.226] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.249] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.265] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.289] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.305] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.320] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.343] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.367] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.392] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.407] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.427] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.438] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.449] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.460] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.476] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.487] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.497] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.514] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.525] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.536] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.552] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.567] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.577] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.596] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.607] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.617] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.628] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.644] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.655] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.665] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.675] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.691] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.702] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.712] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.724] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.740] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.751] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.762] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.772] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.788] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.798] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.811] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.828] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.840] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.850] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.860] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.877] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.888] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.898] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.910] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.926] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.936] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.946] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.959] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.975] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.986] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.996] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.007] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.023] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.034] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.044] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.055] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.071] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.084] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.095] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.111] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.121] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.132] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.142] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.158] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.169] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.179] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.189] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.206] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.216] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.227] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.237] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.253] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.263] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.274] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.285] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.301] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.312] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.322] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.333] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.350] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.360] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.371] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.381] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.397] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.407] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.418] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.428] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.446] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.465] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.476] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.492] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.502] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.513] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.524] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.540] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.551] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.563] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.580] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.592] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.604] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.633] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.644] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.656] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.673] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.684] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.695] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.706] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.723] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.734] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.747] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.757] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.773] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.784] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.794] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.805] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.823] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.834] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.845] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.861] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.872] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.882] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.893] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.918] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.934] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.958] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.973] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.988] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.010] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.025] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.040] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.065] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.081] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.102] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.117] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.132] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.157] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.172] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.194] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.209] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.224] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.248] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.263] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.286] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.301] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.316] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.341] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.357] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.380] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.395] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.410] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.433] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.449] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.476] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.491] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.507] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.530] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.544] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.577] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.593] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.607] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.632] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.643] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.656] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.669] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.687] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.700] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.711] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.722] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.740] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.755] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.771] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.789] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.800] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.811] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.833] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.843] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.855] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.865] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.882] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.894] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.905] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.921] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.932] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.943] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.956] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.973] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.983] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.994] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.005] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.023] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.034] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.044] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.063] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.074] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.084] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.096] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.112] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.123] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.134] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.144] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.162] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.173] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.183] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.201] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.213] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.223] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.234] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.250] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.270] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.281] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.298] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.309] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.319] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.331] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.348] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.360] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.372] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.389] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.400] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.411] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.422] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.438] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.450] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.462] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.485] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.500] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.515] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.538] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.553] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.579] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.603] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.615] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.627] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.646] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.658] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.669] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.686] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.697] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.707] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.719] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.736] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.747] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.759] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.777] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.788] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.798] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.809] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.829] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.841] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.852] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.871] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.882] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.894] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.907] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.924] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.935] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.948] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.965] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.978] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.988] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.999] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.015] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.025] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.036] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.047] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.065] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.077] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.089] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.105] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.117] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.128] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.139] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.157] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.169] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.181] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.205] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.216] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.227] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.237] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.258] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.269] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.279] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.299] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.309] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.320] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.331] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.351] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.364] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.375] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.392] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.403] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.416] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.438] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.450] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.462] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.490] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.500] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.517] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.528] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.545] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.559] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.575] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.590] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.607] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.627] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.643] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.654] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.671] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.682] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.693] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.704] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.722] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.733] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.744] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.761] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.771] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.783] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.794] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.809] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.869] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.884] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.907] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.923] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.938] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.965] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.982] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.015] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.031] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.047] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.072] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.087] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.111] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.129] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.146] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.170] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.186] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.201] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.224] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.240] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.264] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.280] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.304] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.318] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.341] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.359] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.382] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.398] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.414] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.438] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.453] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.469] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.494] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.508] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.531] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.546] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.563] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.587] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.602] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.640] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.657] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.672] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.696] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.710] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.733] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.749] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.765] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.790] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.805] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.833] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.847] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.862] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.886] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.903] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.927] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.942] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.965] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.981] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.997] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.021] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.036] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.058] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.074] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.089] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.113] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.128] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.152] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.168] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.183] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.208] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.223] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.245] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.261] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.301] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.317] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.341] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.356] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.371] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.394] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.410] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.435] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.451] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.466] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.489] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.504] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.526] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.541] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.556] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.581] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.596] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.612] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.644] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.660] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.684] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.700] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.715] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.738] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.758] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.784] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.799] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.827] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.843] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.859] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.882] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.898] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.922] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.938] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.953] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.976] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.991] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.015] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.031] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.047] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.071] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.087] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.112] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.127] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.150] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.165] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.181] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.204] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.219] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.247] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.263] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.278] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.301] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.316] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.340] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.356] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.371] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.395] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.413] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.438] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.453] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.477] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.492] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.508] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.531] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.547] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.562] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.587] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.604] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.663] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.679] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.708] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.723] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.746] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.762] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.778] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.801] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.819] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.843] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.859] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.875] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.899] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.915] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.938] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.953] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.969] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.990] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.005] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.031] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.047] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.062] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.086] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.130] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.145] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.186] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.203] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.229] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.245] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.261] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.284] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.300] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.323] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.339] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.354] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.393] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.413] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.424] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.434] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.445] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.461] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.471] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.482] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.493] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.510] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.521] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.531] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.541] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.558] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.569] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.579] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.589] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.605] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.633] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.649] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.667] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.678] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.695] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.707] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.721] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.742] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.755] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.769] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.792] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.808] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.827] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.856] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.870] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.887] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.899] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.910] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.926] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.937] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.948] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.959] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.976] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.987] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.999] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.022] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.033] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.044] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.055] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.071] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.082] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.094] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.105] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.122] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.133] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.144] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.161] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.173] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.184] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.195] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.212] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.223] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.233] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.244] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.264] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.275] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.286] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.306] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.317] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.327] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.339] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.355] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.366] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.394] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.405] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.416] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.427] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.444] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.457] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.471] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.494] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.511] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.522] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.538] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.548] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.559] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.569] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.586] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.597] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.608] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.619] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.636] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.646] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.659] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.677] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.687] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.698] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.709] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.725] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.738] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.761] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.784] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.801] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.834] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.850] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.876] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.891] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.917] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.933] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.948] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.978] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.994] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.023] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.039] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.075] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.103] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.130] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.145] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.169] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.184] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.208] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.255] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.271] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.287] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.313] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.326] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.337] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.355] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.367] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.378] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.396] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.408] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.419] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.440] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.451] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.462] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.473] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.490] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.501] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.512] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.523] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.541] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.551] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.562] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.579] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.589] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.601] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.611] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.628] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.640] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.650] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.661] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.677] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.688] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.699] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.710] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.730] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.741] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.752] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.768] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.779] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.789] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.800] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.819] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.831] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.842] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.853] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.882] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.894] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.905] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.924] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.934] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.945] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.956] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.975] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.985] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.996] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.008] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.025] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.035] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.046] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.062] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.075] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.086] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.098] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.114] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.126] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.137] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.148] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.169] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.180] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.190] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.207] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.218] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.235] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.260] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.299] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.310] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.322] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.335] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.354] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.365] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.375] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.392] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.402] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.413] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.424] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.441] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.451] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.462] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.472] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.488] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.499] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.510] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.524] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.552] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.578] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.600] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.640] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.656] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.674] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.685] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.696] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.707] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.723] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.734] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.746] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.756] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.772] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.782] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.793] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.803] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.820] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.834] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.845] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.870] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.881] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.892] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.903] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.920] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.931] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.942] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.954] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.971] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.982] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.993] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.004] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.020] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.031] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.041] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.052] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.070] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.082] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.093] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.110] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.124] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.139] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.164] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.180] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.196] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.216] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.227] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.238] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.257] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.269] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.280] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.297] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.309] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.320] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.331] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.347] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.359] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.370] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.381] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.398] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.409] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.419] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.437] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.448] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.459] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.469] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.485] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.496] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.506] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.517] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.538] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.553] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.578] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.594] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.617] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.646] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.670] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.687] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.710] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.726] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.742] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.767] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.782] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.800] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.812] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.825] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.842] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.855] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.865] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.876] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.892] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.903] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.914] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.925] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.950] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.961] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.972] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.992] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.002] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.013] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.029] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.040] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.054] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.080] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.097] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.116] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.147] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.161] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.180] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.194] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.209] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.228] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.241] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.251] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.271] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.289] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.316] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.335] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.362] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.392] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.414] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.429] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.444] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.467] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.481] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.505] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.524] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.546] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.561] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.577] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.601] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.615] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.712] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.743] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.763] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.791] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.811] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.840] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.859] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.891] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.910] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.940] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.959] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.987] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.017] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.046] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.065] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.094] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.113] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.142] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.161] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.191] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.210] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.231] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.259] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.278] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.307] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.326] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.354] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.373] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.401] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.414] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.425] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.442] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.452] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.463] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.478] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.490] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.500] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.512] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.528] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.539] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.550] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.562] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.578] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.589] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.600] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.611] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.629] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.640] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.651] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.669] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.680] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.691] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.703] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.720] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.731] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.743] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.760] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.771] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.781] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.792] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.809] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.820] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.831] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.841] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.859] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.914] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.926] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.938] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.966] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.986] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.027] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.046] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.075] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.094] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.122] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.139] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.158] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.169] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.180] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.202] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.215] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.225] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.236] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.253] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.264] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.274] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.304] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.316] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.326] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.343] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.354] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.364] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.376] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.393] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.405] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.417] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.433] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.444] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.455] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.465] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.483] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.494] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.506] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.516] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.533] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.544] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.556] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.573] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.584] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.596] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.612] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.635] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.650] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.673] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.688] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.703] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.725] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.742] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.765] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.780] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.795] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.819] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.833] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.857] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.875] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.890] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.913] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.928] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.952] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.966] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.981] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.004] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.019] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.034] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.058] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.073] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.096] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.118] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.134] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.158] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.172] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.187] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.209] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.224] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.246] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.261] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.276] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.300] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.315] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.330] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.353] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.368] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.391] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.406] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.422] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.445] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.461] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.484] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.500] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.516] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.538] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.553] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.576] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.591] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.606] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.630] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.643] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.666] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.681] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.696] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.727] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.747] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.775] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.794] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.823] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.840] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.870] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.888] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.921] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.938] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.967] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.984] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.014] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.031] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.059] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.078] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.107] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.125] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.151] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.167] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.194] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.217] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.238] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.250] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.262] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.288] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.306] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.329] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.346] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.368] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.383] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.398] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.424] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.443] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.469] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.494] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.515] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.532] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.556] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.570] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.585] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.607] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.623] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.652] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.672] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.698] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.714] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.728] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.751] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.767] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.790] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.805] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.820] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.844] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.865] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.890] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.906] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.929] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.948] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.964] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.990] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.005] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.026] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.041] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.056] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.078] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.092] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.107] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.131] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.147] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.173] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.191] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.216] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.230] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.247] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.269] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.284] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.316] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.331] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.345] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.373] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.393] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.414] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.427] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.443] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.476] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.495] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.523] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.542] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.570] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.590] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.617] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.633] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.657] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.670] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.681] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.701] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.713] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.724] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.742] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.752] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.763] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.775] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.792] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.803] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.814] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.831] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.841] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.852] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.865] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.881] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.892] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.902] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.916] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.935] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.945] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.956] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.973] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.984] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.995] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.007] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.026] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.039] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.053] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.075] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.086] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.098] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.115] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.126] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.136] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.147] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.163] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.175] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.186] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.198] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.218] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.230] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.242] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.259] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.270] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.284] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.309] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.325] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.341] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.366] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.382] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.416] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.432] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.448] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.472] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.488] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.514] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.532] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.556] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.571] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.587] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.612] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.628] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.652] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.668] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.684] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.708] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.719] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.736] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.747] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.758] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.768] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.785] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.796] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.806] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.818] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.835] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.847] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.861] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.879] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.892] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.904] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.915] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.933] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.945] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.956] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.975] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.988] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.001] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.017] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.028] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.039] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.050] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.067] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.080] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.096] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.120] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.136] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.152] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.176] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.192] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.216] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.256] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.271] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.287] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.311] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.327] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.352] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.368] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.383] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.422] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.458] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.534] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.545] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.558] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.570] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.587] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.599] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.610] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.627] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.640] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.651] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.662] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.679] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.690] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.703] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.719] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.730] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.741] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.756] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.784] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.802] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.849] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.878] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.896] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.929] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.946] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.989] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.011] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.026] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.050] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.065] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.081] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.106] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.126] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.154] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.173] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.195] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.210] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.226] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.250] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.266] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.288] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.306] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.322] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.349] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.368] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.393] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.405] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.422] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.440] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.451] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.468] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.482] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.498] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.520] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.531] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.542] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.552] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.568] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.579] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.589] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.600] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.617] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.627] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.638] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.655] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.666] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.676] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.686] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.707] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.718] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.729] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.740] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.757] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.768] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.779] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.795] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.806] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.816] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.828] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.844] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.854] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.865] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.876] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.892] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.906] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.917] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.928] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.944] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.956] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.968] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.987] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.998] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.008] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.019] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.037] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.047] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.059] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.077] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.087] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.099] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.109] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.125] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.137] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.147] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.159] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.175] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.187] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.197] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.209] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.225] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.237] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.247] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.264] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.275] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.286] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.296] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.318] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.334] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.350] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.372] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.388] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.414] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.429] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.454] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.478] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.493] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.517] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.533] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.549] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.569] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.580] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.590] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.608] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.619] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.630] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.642] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.658] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.669] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.680] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.691] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.713] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.723] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.735] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.751] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.762] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.773] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.783] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.800] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.810] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.821] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.831] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.848] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.859] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.870] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.880] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.898] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.909] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.919] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.938] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.949] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.960] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.971] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.987] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.998] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.009] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.020] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.038] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.048] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.059] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.076] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.086] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.097] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.107] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.123] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.135] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.146] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.157] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.173] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.184] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.194] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.205] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.221] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.243] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.254] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.270] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.281] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.291] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.308] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.319] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.330] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.341] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.358] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.369] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.380] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.391] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.409] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.419] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.431] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.448] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.459] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.469] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.495] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.506] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.516] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.535] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.551] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.562] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.573] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.591] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.602] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.613] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.626] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.659] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.671] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.687] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.699] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.710] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.724] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.743] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.754] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.765] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.781] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.791] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.802] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.813] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.829] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.853] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.870] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.881] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.892] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.904] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.921] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.933] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.946] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.964] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.985] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.997] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.013] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.025] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.037] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.048] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.065] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.076] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.087] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.115] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.126] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.139] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.157] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.169] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.180] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.191] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.208] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.219] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.230] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.247] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.258] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.274] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.296] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.306] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.317] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.328] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.343] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.355] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.366] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.407] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.427] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.457] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.475] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.505] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.524] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.562] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.580] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.606] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.635] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.653] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.668] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.685] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.716] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.737] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.767] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.787] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.807] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.833] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.849] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.860] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.875] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.886] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.899] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.915] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.934] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.952] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.977] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.987] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.998] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.014] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.024] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.035] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.048] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.064] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.075] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.085] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.096] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.112] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.122] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.134] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.150] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.161] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.171] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.181] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.197] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.208] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.219] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.229] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.246] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.257] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.268] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.278] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.295] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.305] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.316] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.328] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.345] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.355] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.366] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.386] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.398] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.409] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.420] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.437] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.447] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.458] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.469] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.486] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.497] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.509] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.527] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.537] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.548] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.558] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.577] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.587] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.598] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.609] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.626] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.645] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.656] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.672] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.683] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.694] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.719] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.729] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.740] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.750] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.767] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.777] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.787] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.803] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.814] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.825] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.835] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.852] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.862] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.873] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.885] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.904] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.915] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.931] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.941] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.952] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.968] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.979] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.995] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.006] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.022] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.033] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.044] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.060] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.072] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.088] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.099] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.109] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.120] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.137] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.147] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.158] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.169] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.186] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.197] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.207] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.218] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.234] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.244] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.255] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.265] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.281] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.302] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.318] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.329] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.339] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.350] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.366] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.388] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.398] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.415] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.426] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.441] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.464] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.480] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.495] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.520] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.538] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.561] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.578] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.589] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.605] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.615] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.627] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.638] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.657] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.675] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.685] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.702] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.713] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.723] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.742] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.753] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.768] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.780] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.797] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.807] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.818] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.834] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.845] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.856] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.867] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.884] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.898] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.908] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.919] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.935] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.946] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.956] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.967] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.985] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.995] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.006] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.022] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.033] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.043] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.053] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.069] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.079] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.090] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.100] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.117] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.134] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.144] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.154] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.171] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.181] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.192] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.208] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.218] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.229] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.239] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.256] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.267] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.288] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.304] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.315] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.325] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.338] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.360] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.370] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.381] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.397] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.407] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.418] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.428] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.444] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.455] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.465] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.476] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.493] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.503] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.514] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.526] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.542] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.552] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.563] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.574] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.590] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.601] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.611] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.639] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.651] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.664] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.697] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.711] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.735] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.749] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.760] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.776] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.787] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.798] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.810] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.827] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.837] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.848] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.866] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.877] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.887] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.899] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.915] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.926] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.936] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.952] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.977] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.992] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.017] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.033] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.057] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.067] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.078] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.088] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.106] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.116] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.127] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.143] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.155] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.165] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.176] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.192] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.202] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.213] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.223] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.239] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.249] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.260] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.270] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.286] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.296] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.307] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.318] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.340] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.351] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.362] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.378] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.388] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.399] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.409] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.428] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.438] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.449] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.459] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.477] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.488] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.498] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.508] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.525] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.535] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.546] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.557] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.573] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.583] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.594] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.607] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.633] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.650] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.670] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.684] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.694] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.718] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.731] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.741] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.762] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.777] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.794] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.821] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.845] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.855] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.866] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.883] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.895] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.906] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.916] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.932] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.943] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.953] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.963] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.980] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.990] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.001] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.011] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.028] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.039] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.049] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.066] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.082] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.099] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.130] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.150] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.180] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.201] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.229] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.240] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.256] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.270] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.281] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.310] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.322] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.336] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.354] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.364] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.375] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.393] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.407] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.419] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.439] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.453] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.464] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.475] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.492] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.503] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.515] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.525] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.541] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.551] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.562] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.579] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.591] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.601] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.613] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.636] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.647] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.658] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.675] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.686] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.698] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.721] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.738] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.749] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.759] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.773] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.793] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.806] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.817] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.834] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.845] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.855] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.867] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.884] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.898] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.908] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.925] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.936] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.947] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.958] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.986] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.996] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.007] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.023] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.040] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.052] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.069] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.079] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.090] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.102] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.123] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.137] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.148] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.164] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.175] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.191] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.211] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.222] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.233] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.250] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.260] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.271] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.281] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.299] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.310] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.321] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.332] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.348] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.359] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.370] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.381] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.397] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.408] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.418] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.429] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.447] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.458] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.469] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.485] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.496] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.507] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.518] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.534] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.545] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.555] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.567] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.582] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.595] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.605] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.617] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.633] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.650] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.661] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.678] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.691] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.702] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.718] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.735] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.747] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.758] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.775] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.785] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.798] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.814] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.825] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.835] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.845] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.861] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.872] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.883] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.893] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.912] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.922] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.933] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.944] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.960] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.971] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.982] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.992] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.009] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.020] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.030] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.046] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.057] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.067] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.078] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.094] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.105] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.116] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.129] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.145] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.157] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.167] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.178] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.195] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.206] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.217] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.235] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.246] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.256] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.267] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.283] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.293] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.303] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.314] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.330] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.340] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.351] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.361] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.378] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.388] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.399] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.409] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.425] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.435] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.446] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.457] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.474] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.484] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.495] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.506] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.522] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.533] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.543] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.553] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.569] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.579] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.590] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.600] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.617] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.627] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.637] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.669] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.685] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.712] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.731] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.757] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.787] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.807] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.834] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.852] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.881] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.897] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.924] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.936] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.946] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.958] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.975] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.986] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.996] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.013] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.025] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.035] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.046] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.062] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.073] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.083] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.094] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.110] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.121] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.133] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.144] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.163] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.174] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.184] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.200] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.210] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.221] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.249] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.259] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.269] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.280] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.295] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.306] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.316] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.326] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.344] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.356] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.367] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.400] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.415] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.438] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.453] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.468] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.492] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.507] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.522] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.546] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.564] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.584] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.595] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.606] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.623] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.639] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.657] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.688] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.716] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.747] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.767] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.809] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.829] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.860] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.880] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.913] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.934] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.954] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.983] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.004] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.035] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.055] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.085] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.106] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.126] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.156] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.176] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.205] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.225] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.257] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.297] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.326] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.348] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.396] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.425] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.447] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.467] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.497] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.513] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.531] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.542] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.554] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.565] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.581] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.591] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.602] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.612] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.629] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.640] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.650] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.667] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.678] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.689] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.700] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.720] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.732] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.743] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.753] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.770] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.791] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.841] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.864] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.891] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.908] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.923] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.947] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.962] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.986] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.002] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.017] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.052] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.067] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.082] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.106] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.121] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.143] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.160] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.177] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.200] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.215] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.240] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.255] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.278] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.294] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.309] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.334] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.350] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.373] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.388] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.404] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.429] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.444] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.468] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.484] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.499] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.524] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.539] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.565] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.576] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.586] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.602] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.613] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.629] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.654] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.671] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.686] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.707] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.718] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.730] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.747] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.757] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.769] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.780] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.796] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.807] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.819] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.843] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.854] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.864] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.875] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.892] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.905] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.915] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.932] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.943] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.953] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.964] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.981] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.991] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.001] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.012] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.029] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.041] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.052] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.063] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.080] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.090] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.101] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.118] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.129] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.139] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.150] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.165] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.178] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.190] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.202] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.221] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.235] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.245] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.261] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.273] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.283] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.293] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.309] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.320] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.332] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.343] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.359] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.369] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.380] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.390] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.406] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.416] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.428] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.445] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.455] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.465] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.476] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.491] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.502] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.512] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.523] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.540] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.550] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.561] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.571] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.587] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.597] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.608] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.618] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.636] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.646] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.657] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.668] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.694] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.716] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.741] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.758] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.781] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.796] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.812] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.846] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.866] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.882] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.894] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.904] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.915] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.932] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.950] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.960] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.979] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.989] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.001] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.011] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.027] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.038] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.049] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.060] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.076] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.087] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.098] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.109] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.126] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.136] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.147] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.163] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.174] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.184] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.195] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.211] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.222] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.244] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.260] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.271] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.281] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.309] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.320] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.332] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.342] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.399] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.421] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.456] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.472] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.483] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.499] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.510] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.521] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.537] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.547] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.559] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.570] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.586] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.596] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.606] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.617] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.633] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.644] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.654] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.664] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.681] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.691] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.701] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.713] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.729] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.740] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.751] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.763] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.788] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.801] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.818] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.828] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.839] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.857] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.874] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.887] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.898] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.916] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.926] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.937] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.948] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.965] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.976] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.989] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.006] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.017] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.028] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.038] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.054] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.065] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.076] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.087] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.105] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.115] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.126] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.137] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.153] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.164] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.174] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.185] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.201] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.212] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.223] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.239] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.250] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.261] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.272] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.288] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.298] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.313] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.337] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.353] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.369] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.393] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.409] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.433] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.449] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.464] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.485] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.501] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.526] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.548] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.558] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.570] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.586] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.597] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.608] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.619] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.636] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.658] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.669] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.686] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.696] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.709] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.726] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.736] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.749] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.760] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.779] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.790] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.801] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.817] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.828] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.838] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.863] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.874] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.886] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.897] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.918] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.933] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.949] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.976] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.989] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.007] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.018] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.029] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.040] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.059] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.070] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.082] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.099] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.110] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.121] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.134] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.151] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.162] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.174] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.190] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.202] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.213] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.224] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.242] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.254] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.265] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.275] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.294] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.305] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.316] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.332] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.344] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.354] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.365] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.382] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.396] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.408] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.425] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.435] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.447] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.459] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.483] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.502] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.530] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.551] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.569] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.597] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.616] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.647] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.666] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.694] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.713] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.742] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.757] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.776] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.788] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.799] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.815] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.827] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.837] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.851] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.867] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.878] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.889] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.899] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.917] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.927] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.945] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.967] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.985] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.013] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.031] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.058] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.075] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.106] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.125] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.152] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.170] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.198] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.216] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.243] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.262] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.290] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.309] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.336] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.354] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.372] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.397] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.415] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.435] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.449] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.461] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.485] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.504] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.533] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.552] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.578] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.589] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.600] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.616] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.627] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.639] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.650] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.666] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.677] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.687] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.704] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.715] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.725] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.736] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.753] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.764] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.774] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.785] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.802] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.812] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.823] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.834] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.859] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.870] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.881] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.900] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.914] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.928] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.940] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.966] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.979] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.990] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.020] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.031] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.042] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.056] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.080] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.098] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.125] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.142] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.162] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.177] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.192] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.294] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.327] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.344] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.354] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.365] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.376] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.393] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.409] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.425] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.448] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.463] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.504] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.519] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.543] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.557] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.581] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.596] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.612] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.636] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.651] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.667] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.692] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.707] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.731] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.746] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.770] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.786] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.802] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.825] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.847] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.871] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.887] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.902] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.925] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.940] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.973] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.992] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.008] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.034] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.049] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.074] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.087] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.098] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.116] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.127] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.137] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.148] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.166] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.177] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.187] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.210] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.221] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.248] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.258] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.269] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.279] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.296] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.306] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.317] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.328] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.345] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.360] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.375] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.398] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.413] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.429] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.453] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.469] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.492] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.507] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.523] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.547] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.563] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.586] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.602] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.617] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.640] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.656] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.679] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.695] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.720] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.736] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.752] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.780] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.795] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.835] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.850] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.866] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.892] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.909] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.934] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.949] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.993] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.028] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.043] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.059] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.085] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.101] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.119] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.144] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.160] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.176] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.200] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.215] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.241] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.258] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.282] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.309] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.326] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.338] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.353] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.363] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.382] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.392] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.403] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.420] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.431] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.442] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.455] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.494] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.519] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.534] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.546] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.569] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.589] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.621] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.641] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.666] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.677] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.689] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.706] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.719] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.730] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.747] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.760] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.770] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.791] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.811] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.822] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.833] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.844] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.861] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.873] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.885] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.903] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.915] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.926] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.938] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.955] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.966] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.980] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.997] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.016] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.033] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.047] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.064] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.075] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.086] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.100] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.125] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.143] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.160] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.187] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.204] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.228] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.245] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.269] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.281] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.295] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.313] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.324] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.339] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.360] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.372] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.384] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.394] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.412] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.424] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.435] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.454] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.470] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.483] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.500] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.512] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.522] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.533] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.558] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.570] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.581] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.598] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.610] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.620] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.637] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.647] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.658] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.668] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.684] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.695] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.705] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.719] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.735] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.746] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.757] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.769] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.787] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.798] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.810] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.826] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.837] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.848] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.858] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.874] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.885] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.895] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.906] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.925] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.935] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.946] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.962] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.978] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.988] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.998] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.016] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.027] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.038] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.063] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.074] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.085] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.095] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.116] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.127] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.138] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.156] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.206] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.259] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.284] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.307] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.322] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.345] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.357] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.367] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.383] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.396] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.408] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.419] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.436] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.446] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.458] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.469] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.490] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.504] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.528] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.544] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.559] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.576] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.588] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.603] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.628] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.644] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.670] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.686] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.701] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.722] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.732] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.742] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.759] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.775] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.786] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.797] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.814] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.824] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.835] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.851] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.862] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.872] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.883] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.900] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.910] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.921] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.933] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.949] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.961] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.971] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.982] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.006] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.017] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.031] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.047] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.058] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.069] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.079] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.097] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.120] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.131] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.149] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.162] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.174] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.186] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.203] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.217] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.229] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.249] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.259] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.270] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.282] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.298] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.310] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.321] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.338] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.349] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.360] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.370] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.386] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.398] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.415] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.443] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.461] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.481] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.511] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.530] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.555] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.572] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.599] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.617] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.636] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.661] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.672] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.691] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.705] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.717] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.733] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.744] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.755] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.775] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.788] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.802] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.820] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.831] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.842] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.852] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.868] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.879] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.890] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.901] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.918] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.932] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.943] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.954] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.970] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.983] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.997] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.014] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.027] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.039] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.062] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.082] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.112] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.141] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.155] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.178] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.193] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.215] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.230] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.245] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.268] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.283] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.306] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.321] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.337] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.359] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.374] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.389] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.414] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.430] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.452] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.467] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.483] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.506] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.521] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.544] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.559] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.574] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.596] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.611] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.634] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.649] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.665] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.687] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.703] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.718] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.742] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.754] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.772] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.784] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.794] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.808] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.825] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.836] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.848] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.864] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.875] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.885] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.896] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.912] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.924] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.935] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.946] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.962] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.973] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.986] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.996] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.013] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.023] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.034] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.044] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.061] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.072] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.082] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.098] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.109] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.120] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.138] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.155] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.166] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.177] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.197] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.208] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.220] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.248] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.259] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.270] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.287] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.298] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.308] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.320] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.336] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.347] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.358] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.369] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.386] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.397] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.407] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.418] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.435] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.445] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.456] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.472] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.483] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.493] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.512] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.549] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.574] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.603] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.615] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.625] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.636] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.653] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.663] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.674] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.691] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.701] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.712] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.723] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.740] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.751] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.761] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.772] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.792] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.803] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.818] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.843] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.862] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.888] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.901] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.911] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.928] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.939] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.949] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.961] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.977] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.989] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.000] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.010] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.028] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.039] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.050] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.068] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.085] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.101] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.119] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.137] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.166] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.196] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.215] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.243] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.262] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.311] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.336] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.351] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.374] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.389] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.403] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.425] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.440] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.462] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.477] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.492] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.515] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.530] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.553] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.564] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.574] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.585] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.604] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.615] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.625] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.635] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.651] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.662] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.672] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.682] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.698] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.709] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.722] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.747] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.768] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.799] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.819] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.850] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.870] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.893] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.905] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.927] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.938] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.949] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.960] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.976] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.992] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.009] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.040] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.060] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.092] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.112] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.131] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.153] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.163] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.175] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.196] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.213] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.244] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.274] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.295] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.326] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.345] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.365] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.394] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.408] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.428] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.441] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.452] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.477] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.496] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.527] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.548] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.578] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.598] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.633] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.647] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.664] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.674] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.688] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.699] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.719] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.730] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.741] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.760] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.771] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.781] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.805] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.822] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.850] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.865] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.881] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.905] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.921] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.945] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.961] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.977] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.002] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.019] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.042] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.058] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.083] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.099] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.114] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.139] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.155] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.180] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.195] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.213] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.249] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.268] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.296] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.314] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.341] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.360] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.388] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.406] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.433] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.449] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.472] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.487] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.502] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.526] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.541] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.557] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.580] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.595] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.618] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.633] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.667] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.678] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.688] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.705] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.715] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.726] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.737] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.753] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.764] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.774] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.785] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.810] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.826] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.849] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.864] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.881] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.906] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.922] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.947] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.963] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.976] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.993] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.004] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.015] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.032] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.042] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.053] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.064] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.082] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.093] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.116] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.133] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.146] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.158] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.176] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.192] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.208] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.227] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.245] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.255] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.275] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.285] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.296] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.312] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.323] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.334] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.351] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.367] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.382] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.405] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.420] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.444] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.459] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.474] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.496] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.512] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.535] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.550] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.565] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.588] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.603] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.626] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.637] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.652] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.675] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.690] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.705] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.727] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.742] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.757] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.779] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.795] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.818] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.840] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.862] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.877] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.900] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.916] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.933] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.950] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.973] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.987] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.003] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.033] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.048] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.071] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.086] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.101] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.128] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.143] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.158] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.180] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.194] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.205] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.230] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.260] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.286] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.300] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.315] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.340] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.355] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.378] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.393] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.408] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.434] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.449] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.475] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.492] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.517] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.535] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.549] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.570] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.584] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.595] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.615] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.628] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.640] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.656] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.667] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.678] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.689] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.706] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.716] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.728] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.739] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.756] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.767] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.777] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.801] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.811] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.823] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.839] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.849] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.862] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.874] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.889] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.900] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.910] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.921] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.942] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.954] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.966] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.982] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.993] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.004] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.014] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.031] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.041] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.052] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.062] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.079] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.089] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.099] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.109] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.126] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.136] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.149] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.166] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.176] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.187] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.198] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.221] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.234] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.249] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.283] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.296] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.307] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.325] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.336] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.347] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.358] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.374] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.385] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.396] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.406] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.423] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.435] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.446] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.462] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.473] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.483] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.494] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.510] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.526] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.540] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.556] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.567] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.578] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.588] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.605] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.616] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.626] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.638] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.656] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.667] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.678] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.689] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.706] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.717] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.728] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.744] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.755] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.766] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.777] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.794] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.807] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.819] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.839] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.850] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.863] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.877] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.896] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.912] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.932] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.943] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.954] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.968] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.987] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.007] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.034] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.054] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.075] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.086] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.099] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.109] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.130] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.140] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.152] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.168] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.184] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.204] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.233] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.247] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.264] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.274] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.285] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.311] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.324] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.338] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.355] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.367] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.388] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.405] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.416] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.429] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.445] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.457] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.467] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.497] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.508] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.523] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.551] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.571] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.600] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.612] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.625] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.646] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.658] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.673] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.689] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.700] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.712] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.729] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.739] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.752] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.765] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.781] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.795] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.805] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.827] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.847] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.876] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.895] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.924] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.945] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.975] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.994] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.021] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.033] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.045] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.061] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.073] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.084] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.108] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.124] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.142] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.167] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.183] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.207] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.224] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.248] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.264] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.280] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.304] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.331] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.355] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.366] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.376] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.388] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.405] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.416] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.428] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.445] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.456] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.466] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.477] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.493] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.505] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.516] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.527] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.544] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.554] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.565] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.575] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.594] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.605] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.616] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.634] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.645] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.658] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.668] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.686] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.699] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.709] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.726] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.736] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.747] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.759] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.788] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.804] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.835] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.853] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.882] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.901] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.929] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.948] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.977] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.996] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.025] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.039] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.056] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.069] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.085] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.109] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.120] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.132] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.149] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.160] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.172] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.183] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.207] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.225] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.249] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.267] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.291] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.304] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.316] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.345] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.361] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.386] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.402] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.419] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.448] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.461] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.477] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.488] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.498] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.510] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.527] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.537] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.549] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.560] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.577] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.588] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.598] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.615] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.627] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.637] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.649] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.665] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.680] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.696] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.720] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.737] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.761] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.777] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.796] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.820] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.837] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.861] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.877] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.902] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.918] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.935] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.959] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.976] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.001] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.017] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.043] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.059] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.075] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.099] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.114] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.142] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.158] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.182] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.198] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.214] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.237] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.254] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.293] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.309] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.358] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.376] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.392] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.416] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.431] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.447] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.471] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.487] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.511] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.527] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.540] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.558] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.570] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.582] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.600] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.610] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.621] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.633] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.649] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.659] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.669] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.680] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.701] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.716] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.730] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.747] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.759] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.770] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.787] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.799] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.810] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.820] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.837] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.847] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.858] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.869] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.887] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.899] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.912] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.929] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.940] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.950] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.961] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.977] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.989] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.000] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.011] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.028] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.040] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.051] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.067] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.078] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.088] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.100] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.116] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.127] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.138] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.150] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.168] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.178] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.189] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.210] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.223] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.234] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.244] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.260] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.274] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.321] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.339] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.368] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.388] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.424] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.442] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.468] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.486] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.512] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.529] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.557] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.578] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.604] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.652] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.669] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.695] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.713] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.729] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.755] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.776] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.807] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.828] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.848] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.877] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.893] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.918] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.932] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.946] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.968] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.984] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.014] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.033] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.062] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.082] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.111] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.130] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.158] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.176] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.201] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.214] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.225] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.242] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.254] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.270] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.295] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.311] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.330] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.340] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.351] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.362] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.378] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.388] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.399] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.409] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.434] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.444] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.454] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.470] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.481] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.491] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.502] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.517] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.528] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.538] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.548] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.565] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.575] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.585] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.595] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.611] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.632] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.642] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.658] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.669] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.680] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.691] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.707] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.718] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.729] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.742] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.760] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.770] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.781] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.798] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.808] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.820] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.831] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.850] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x413000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.866] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x49f000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.882] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40e000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40e000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.906] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.921] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.945] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.961] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.000] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.016] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.038] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.054] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.070] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.094] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.106] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.131] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.147] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.162] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.185] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.200] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.224] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.239] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.254] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.315] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.330] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.344] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.367] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.383] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.398] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.427] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.442] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.458] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.483] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.499] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.521] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.537] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.553] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.575] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.590] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.605] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.629] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.650] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.666] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.676] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.688] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.704] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.715] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.728] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.740] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.756] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.766] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.776] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.786] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.802] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.813] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.829] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.858] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.876] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.905] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.924] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.952] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.969] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.997] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.014] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.033] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.043] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.054] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.068] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.088] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.098] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.110] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.131] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x417000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.142] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.153] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.170] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.182] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.193] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.204] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.221] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.231] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.242] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.252] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.270] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.281] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.291] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.302] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x405000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.318] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.329] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.339] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.356] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.367] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.378] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.389] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.404] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x402000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.415] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x415000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.425] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x412000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.447] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x40e000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x40e000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.535] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x404000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.546] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0024*=0x403000, NumberOfBytesToProtect=0x22b0020, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.559] NtProtectVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x22b0024*=0x41a000, NumberOfBytesToProtect=0x22b0020, NewAccessProtection=0x40, OldAccessProtection=0x22b0000) Thread: id = 47 os_tid = 0xabc [0173.010] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0173.012] Sleep (dwMilliseconds=0x5) [0173.024] Sleep (dwMilliseconds=0x5) [0173.039] Sleep (dwMilliseconds=0x5) [0173.055] Sleep (dwMilliseconds=0x5) [0173.070] Sleep (dwMilliseconds=0x5) [0173.086] Sleep (dwMilliseconds=0x5) [0173.102] Sleep (dwMilliseconds=0x5) [0173.117] Sleep (dwMilliseconds=0x5) [0173.133] Sleep (dwMilliseconds=0x5) [0173.182] Sleep (dwMilliseconds=0x5) [0173.195] Sleep (dwMilliseconds=0x5) [0173.212] Sleep (dwMilliseconds=0x5) [0173.226] Sleep (dwMilliseconds=0x5) [0173.242] Sleep (dwMilliseconds=0x5) [0173.257] Sleep (dwMilliseconds=0x5) [0173.273] Sleep (dwMilliseconds=0x5) [0173.289] Sleep (dwMilliseconds=0x5) [0173.304] Sleep (dwMilliseconds=0x5) [0173.492] Sleep (dwMilliseconds=0x5) [0173.540] Sleep (dwMilliseconds=0x5) [0174.656] Sleep (dwMilliseconds=0x5) [0174.720] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0174.723] Sleep (dwMilliseconds=0x5) [0174.778] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0174.780] Sleep (dwMilliseconds=0x5) [0174.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0174.832] Sleep (dwMilliseconds=0x5) [0174.864] Sleep (dwMilliseconds=0x5) [0174.914] Sleep (dwMilliseconds=0x5) [0174.971] Sleep (dwMilliseconds=0x5) [0175.043] Sleep (dwMilliseconds=0x5) [0175.090] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.092] Sleep (dwMilliseconds=0x5) [0175.122] Sleep (dwMilliseconds=0x5) [0175.133] Sleep (dwMilliseconds=0x5) [0175.181] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.183] Sleep (dwMilliseconds=0x5) [0175.229] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.231] Sleep (dwMilliseconds=0x5) [0175.274] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.276] Sleep (dwMilliseconds=0x5) [0175.317] Sleep (dwMilliseconds=0x5) [0175.375] Sleep (dwMilliseconds=0x5) [0175.520] Sleep (dwMilliseconds=0x5) [0175.573] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.575] Sleep (dwMilliseconds=0x5) [0175.619] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.621] Sleep (dwMilliseconds=0x5) [0175.669] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.671] Sleep (dwMilliseconds=0x5) [0175.726] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.728] Sleep (dwMilliseconds=0x5) [0175.781] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.783] Sleep (dwMilliseconds=0x5) [0175.826] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.829] Sleep (dwMilliseconds=0x5) [0175.867] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.869] Sleep (dwMilliseconds=0x5) [0175.913] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.915] Sleep (dwMilliseconds=0x5) [0175.963] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0175.967] Sleep (dwMilliseconds=0x5) [0176.007] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.009] Sleep (dwMilliseconds=0x5) [0176.054] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.056] Sleep (dwMilliseconds=0x5) [0176.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.106] Sleep (dwMilliseconds=0x5) [0176.151] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.153] Sleep (dwMilliseconds=0x5) [0176.198] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.200] Sleep (dwMilliseconds=0x5) [0176.246] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.248] Sleep (dwMilliseconds=0x5) [0176.291] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.293] Sleep (dwMilliseconds=0x5) [0176.337] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.338] Sleep (dwMilliseconds=0x5) [0176.381] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.383] Sleep (dwMilliseconds=0x5) [0176.431] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.433] Sleep (dwMilliseconds=0x5) [0176.477] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.479] Sleep (dwMilliseconds=0x5) [0176.491] Sleep (dwMilliseconds=0x5) [0176.514] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.515] Sleep (dwMilliseconds=0x5) [0176.520] Sleep (dwMilliseconds=0x5) [0176.545] Sleep (dwMilliseconds=0x5) [0176.552] Sleep (dwMilliseconds=0x5) [0176.570] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.573] Sleep (dwMilliseconds=0x5) [0176.581] Sleep (dwMilliseconds=0x5) [0176.596] Sleep (dwMilliseconds=0x5) [0176.612] Sleep (dwMilliseconds=0x5) [0176.627] Sleep (dwMilliseconds=0x5) [0176.643] Sleep (dwMilliseconds=0x5) [0176.658] Sleep (dwMilliseconds=0x5) [0176.674] Sleep (dwMilliseconds=0x5) [0176.689] Sleep (dwMilliseconds=0x5) [0176.706] Sleep (dwMilliseconds=0x5) [0176.722] Sleep (dwMilliseconds=0x5) [0176.750] Sleep (dwMilliseconds=0x5) [0176.752] Sleep (dwMilliseconds=0x5) [0176.768] Sleep (dwMilliseconds=0x5) [0176.852] Sleep (dwMilliseconds=0x5) [0176.861] Sleep (dwMilliseconds=0x5) [0176.877] Sleep (dwMilliseconds=0x5) [0176.894] Sleep (dwMilliseconds=0x5) [0176.912] Sleep (dwMilliseconds=0x5) [0176.927] Sleep (dwMilliseconds=0x5) [0176.950] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0176.952] Sleep (dwMilliseconds=0x5) [0177.059] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.061] Sleep (dwMilliseconds=0x5) [0177.109] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.112] Sleep (dwMilliseconds=0x5) [0177.155] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.157] Sleep (dwMilliseconds=0x5) [0177.195] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.197] Sleep (dwMilliseconds=0x5) [0177.244] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.246] Sleep (dwMilliseconds=0x5) [0177.288] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.290] Sleep (dwMilliseconds=0x5) [0177.338] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.341] Sleep (dwMilliseconds=0x5) [0177.383] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.385] Sleep (dwMilliseconds=0x5) [0177.430] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.432] Sleep (dwMilliseconds=0x5) [0177.480] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.483] Sleep (dwMilliseconds=0x5) [0177.539] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.541] Sleep (dwMilliseconds=0x5) [0177.586] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.587] Sleep (dwMilliseconds=0x5) [0177.632] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.634] Sleep (dwMilliseconds=0x5) [0177.682] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.684] Sleep (dwMilliseconds=0x5) [0177.727] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.729] Sleep (dwMilliseconds=0x5) [0177.801] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.804] Sleep (dwMilliseconds=0x5) [0177.851] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.853] Sleep (dwMilliseconds=0x5) [0177.901] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.904] Sleep (dwMilliseconds=0x5) [0177.946] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.948] Sleep (dwMilliseconds=0x5) [0177.997] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0177.999] Sleep (dwMilliseconds=0x5) [0178.039] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.041] Sleep (dwMilliseconds=0x5) [0178.083] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.085] Sleep (dwMilliseconds=0x5) [0178.129] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.131] Sleep (dwMilliseconds=0x5) [0178.178] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.180] Sleep (dwMilliseconds=0x5) [0178.225] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.228] Sleep (dwMilliseconds=0x5) [0178.272] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.273] Sleep (dwMilliseconds=0x5) [0178.319] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.321] Sleep (dwMilliseconds=0x5) [0178.370] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.373] Sleep (dwMilliseconds=0x5) [0178.414] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.417] Sleep (dwMilliseconds=0x5) [0178.459] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.461] Sleep (dwMilliseconds=0x5) [0178.506] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.508] Sleep (dwMilliseconds=0x5) [0178.552] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.554] Sleep (dwMilliseconds=0x5) [0178.603] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.605] Sleep (dwMilliseconds=0x5) [0178.649] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.651] Sleep (dwMilliseconds=0x5) [0178.693] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.696] Sleep (dwMilliseconds=0x5) [0178.740] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.742] Sleep (dwMilliseconds=0x5) [0178.786] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.789] Sleep (dwMilliseconds=0x5) [0178.853] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.855] Sleep (dwMilliseconds=0x5) [0178.898] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.901] Sleep (dwMilliseconds=0x5) [0178.947] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.949] Sleep (dwMilliseconds=0x5) [0178.991] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0178.994] Sleep (dwMilliseconds=0x5) [0179.037] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.041] Sleep (dwMilliseconds=0x5) [0179.083] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.085] Sleep (dwMilliseconds=0x5) [0179.300] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.344] Sleep (dwMilliseconds=0x5) [0179.357] Sleep (dwMilliseconds=0x5) [0179.373] Sleep (dwMilliseconds=0x5) [0179.573] Sleep (dwMilliseconds=0x5) [0179.581] Sleep (dwMilliseconds=0x5) [0179.591] Sleep (dwMilliseconds=0x5) [0179.607] Sleep (dwMilliseconds=0x5) [0179.626] Sleep (dwMilliseconds=0x5) [0179.639] Sleep (dwMilliseconds=0x5) [0179.677] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.679] Sleep (dwMilliseconds=0x5) [0179.686] Sleep (dwMilliseconds=0x5) [0179.705] Sleep (dwMilliseconds=0x5) [0179.723] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.724] Sleep (dwMilliseconds=0x5) [0179.732] Sleep (dwMilliseconds=0x5) [0179.753] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.755] Sleep (dwMilliseconds=0x5) [0179.766] Sleep (dwMilliseconds=0x5) [0179.784] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.786] Sleep (dwMilliseconds=0x5) [0179.820] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.822] Sleep (dwMilliseconds=0x5) [0179.861] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0179.863] Sleep (dwMilliseconds=0x5) [0180.074] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.076] Sleep (dwMilliseconds=0x5) [0180.090] Sleep (dwMilliseconds=0x5) [0180.113] Sleep (dwMilliseconds=0x5) [0180.122] Sleep (dwMilliseconds=0x5) [0180.185] Sleep (dwMilliseconds=0x5) [0180.201] Sleep (dwMilliseconds=0x5) [0180.215] Sleep (dwMilliseconds=0x5) [0180.233] Sleep (dwMilliseconds=0x5) [0180.252] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.254] Sleep (dwMilliseconds=0x5) [0180.267] Sleep (dwMilliseconds=0x5) [0180.281] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.283] Sleep (dwMilliseconds=0x5) [0180.296] Sleep (dwMilliseconds=0x5) [0180.329] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.331] Sleep (dwMilliseconds=0x5) [0180.376] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.378] Sleep (dwMilliseconds=0x5) [0180.426] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.429] Sleep (dwMilliseconds=0x5) [0180.519] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.522] Sleep (dwMilliseconds=0x5) [0180.566] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.568] Sleep (dwMilliseconds=0x5) [0180.616] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.618] Sleep (dwMilliseconds=0x5) [0180.658] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.660] Sleep (dwMilliseconds=0x5) [0180.709] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.711] Sleep (dwMilliseconds=0x5) [0180.755] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.757] Sleep (dwMilliseconds=0x5) [0180.799] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.801] Sleep (dwMilliseconds=0x5) [0180.845] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.846] Sleep (dwMilliseconds=0x5) [0180.893] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.895] Sleep (dwMilliseconds=0x5) [0180.956] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0180.957] Sleep (dwMilliseconds=0x5) [0181.000] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.001] Sleep (dwMilliseconds=0x5) [0181.049] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.051] Sleep (dwMilliseconds=0x5) [0181.096] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.097] Sleep (dwMilliseconds=0x5) [0181.141] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.143] Sleep (dwMilliseconds=0x5) [0181.188] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.190] Sleep (dwMilliseconds=0x5) [0181.236] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.237] Sleep (dwMilliseconds=0x5) [0181.280] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.282] Sleep (dwMilliseconds=0x5) [0181.330] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.332] Sleep (dwMilliseconds=0x5) [0181.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.379] Sleep (dwMilliseconds=0x5) [0181.422] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.424] Sleep (dwMilliseconds=0x5) [0181.474] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.476] Sleep (dwMilliseconds=0x5) [0181.519] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.521] Sleep (dwMilliseconds=0x5) [0181.564] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.566] Sleep (dwMilliseconds=0x5) [0181.610] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.612] Sleep (dwMilliseconds=0x5) [0181.657] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.658] Sleep (dwMilliseconds=0x5) [0181.710] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.712] Sleep (dwMilliseconds=0x5) [0181.751] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.757] Sleep (dwMilliseconds=0x5) [0181.798] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.799] Sleep (dwMilliseconds=0x5) [0181.844] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.846] Sleep (dwMilliseconds=0x5) [0181.890] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.892] Sleep (dwMilliseconds=0x5) [0181.941] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.944] Sleep (dwMilliseconds=0x5) [0181.984] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0181.987] Sleep (dwMilliseconds=0x5) [0182.031] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.033] Sleep (dwMilliseconds=0x5) [0182.079] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.080] Sleep (dwMilliseconds=0x5) [0182.125] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.127] Sleep (dwMilliseconds=0x5) [0182.169] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.171] Sleep (dwMilliseconds=0x5) [0182.222] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.224] Sleep (dwMilliseconds=0x5) [0182.264] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.266] Sleep (dwMilliseconds=0x5) [0182.313] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.315] Sleep (dwMilliseconds=0x5) [0182.358] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.360] Sleep (dwMilliseconds=0x5) [0182.406] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.409] Sleep (dwMilliseconds=0x5) [0182.452] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.454] Sleep (dwMilliseconds=0x5) [0182.498] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.500] Sleep (dwMilliseconds=0x5) [0182.545] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.547] Sleep (dwMilliseconds=0x5) [0182.591] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.593] Sleep (dwMilliseconds=0x5) [0182.642] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.644] Sleep (dwMilliseconds=0x5) [0182.689] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.692] Sleep (dwMilliseconds=0x5) [0182.734] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.736] Sleep (dwMilliseconds=0x5) [0182.780] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.783] Sleep (dwMilliseconds=0x5) [0182.825] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.826] Sleep (dwMilliseconds=0x5) [0182.874] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.876] Sleep (dwMilliseconds=0x5) [0182.919] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.921] Sleep (dwMilliseconds=0x5) [0182.965] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0182.967] Sleep (dwMilliseconds=0x5) [0183.014] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.016] Sleep (dwMilliseconds=0x5) [0183.061] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.063] Sleep (dwMilliseconds=0x5) [0183.108] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.110] Sleep (dwMilliseconds=0x5) [0183.165] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.217] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.218] Sleep (dwMilliseconds=0x5) [0183.263] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.265] Sleep (dwMilliseconds=0x5) [0183.308] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.311] Sleep (dwMilliseconds=0x5) [0183.355] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.357] Sleep (dwMilliseconds=0x5) [0183.405] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.406] Sleep (dwMilliseconds=0x5) [0183.452] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.455] Sleep (dwMilliseconds=0x5) [0183.506] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.509] Sleep (dwMilliseconds=0x5) [0183.552] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.557] Sleep (dwMilliseconds=0x5) [0183.595] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.597] Sleep (dwMilliseconds=0x5) [0183.640] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.642] Sleep (dwMilliseconds=0x5) [0183.686] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.688] Sleep (dwMilliseconds=0x5) [0183.732] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.734] Sleep (dwMilliseconds=0x5) [0183.778] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.780] Sleep (dwMilliseconds=0x5) [0183.826] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.828] Sleep (dwMilliseconds=0x5) [0183.875] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.877] Sleep (dwMilliseconds=0x5) [0183.922] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.924] Sleep (dwMilliseconds=0x5) [0183.965] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0183.967] Sleep (dwMilliseconds=0x5) [0184.027] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.029] Sleep (dwMilliseconds=0x5) [0184.077] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.079] Sleep (dwMilliseconds=0x5) [0184.125] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.129] Sleep (dwMilliseconds=0x5) [0184.172] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.174] Sleep (dwMilliseconds=0x5) [0184.300] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.303] Sleep (dwMilliseconds=0x5) [0184.340] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.342] Sleep (dwMilliseconds=0x5) [0184.385] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.387] Sleep (dwMilliseconds=0x5) [0184.431] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.433] Sleep (dwMilliseconds=0x5) [0184.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.481] Sleep (dwMilliseconds=0x5) [0184.527] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.529] Sleep (dwMilliseconds=0x5) [0184.571] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.576] Sleep (dwMilliseconds=0x5) [0184.621] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.623] Sleep (dwMilliseconds=0x5) [0184.667] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.669] Sleep (dwMilliseconds=0x5) [0184.716] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.719] Sleep (dwMilliseconds=0x5) [0184.761] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.762] Sleep (dwMilliseconds=0x5) [0184.806] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.810] Sleep (dwMilliseconds=0x5) [0184.856] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.859] Sleep (dwMilliseconds=0x5) [0184.899] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.901] Sleep (dwMilliseconds=0x5) [0184.948] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.949] Sleep (dwMilliseconds=0x5) [0184.993] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0184.995] Sleep (dwMilliseconds=0x5) [0185.043] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.045] Sleep (dwMilliseconds=0x5) [0185.092] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.095] Sleep (dwMilliseconds=0x5) [0185.139] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.142] Sleep (dwMilliseconds=0x5) [0185.183] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.185] Sleep (dwMilliseconds=0x5) [0185.226] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.228] Sleep (dwMilliseconds=0x5) [0185.274] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.275] Sleep (dwMilliseconds=0x5) [0185.322] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.324] Sleep (dwMilliseconds=0x5) [0185.367] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.371] Sleep (dwMilliseconds=0x5) [0185.420] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.466] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.468] Sleep (dwMilliseconds=0x5) [0185.510] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.513] Sleep (dwMilliseconds=0x5) [0185.559] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.561] Sleep (dwMilliseconds=0x5) [0185.653] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.655] Sleep (dwMilliseconds=0x5) [0185.697] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.699] Sleep (dwMilliseconds=0x5) [0185.747] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.749] Sleep (dwMilliseconds=0x5) [0185.792] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.794] Sleep (dwMilliseconds=0x5) [0185.838] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.842] Sleep (dwMilliseconds=0x5) [0185.887] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.889] Sleep (dwMilliseconds=0x5) [0185.931] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.933] Sleep (dwMilliseconds=0x5) [0185.979] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0185.981] Sleep (dwMilliseconds=0x5) [0186.025] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0186.027] Sleep (dwMilliseconds=0x5) [0186.077] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0186.080] Sleep (dwMilliseconds=0x5) [0186.181] Sleep (dwMilliseconds=0x5) [0186.396] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0186.434] Sleep (dwMilliseconds=0x5) [0187.427] Sleep (dwMilliseconds=0x5) [0187.476] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.479] Sleep (dwMilliseconds=0x5) [0187.527] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.529] Sleep (dwMilliseconds=0x5) [0187.573] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.576] Sleep (dwMilliseconds=0x5) [0187.621] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.623] Sleep (dwMilliseconds=0x5) [0187.664] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.666] Sleep (dwMilliseconds=0x5) [0187.711] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.714] Sleep (dwMilliseconds=0x5) [0187.759] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.762] Sleep (dwMilliseconds=0x5) [0187.822] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.824] Sleep (dwMilliseconds=0x5) [0187.870] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.873] Sleep (dwMilliseconds=0x5) [0187.913] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.917] Sleep (dwMilliseconds=0x5) [0187.961] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0187.964] Sleep (dwMilliseconds=0x5) [0188.007] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.010] Sleep (dwMilliseconds=0x5) [0188.053] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.055] Sleep (dwMilliseconds=0x5) [0188.100] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.103] Sleep (dwMilliseconds=0x5) [0188.149] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.152] Sleep (dwMilliseconds=0x5) [0188.192] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.194] Sleep (dwMilliseconds=0x5) [0188.241] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.243] Sleep (dwMilliseconds=0x5) [0188.287] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.289] Sleep (dwMilliseconds=0x5) [0188.335] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.338] Sleep (dwMilliseconds=0x5) [0188.381] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.384] Sleep (dwMilliseconds=0x5) [0188.427] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.429] Sleep (dwMilliseconds=0x5) [0188.470] Sleep (dwMilliseconds=0x5) [0188.507] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.509] Sleep (dwMilliseconds=0x5) [0188.554] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.556] Sleep (dwMilliseconds=0x5) [0188.597] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.599] Sleep (dwMilliseconds=0x5) [0188.815] Sleep (dwMilliseconds=0x5) [0188.862] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0188.864] Sleep (dwMilliseconds=0x5) [0188.900] Sleep (dwMilliseconds=0x5) [0189.778] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0189.836] Sleep (dwMilliseconds=0x5) [0189.886] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0189.888] Sleep (dwMilliseconds=0x5) [0189.949] Sleep (dwMilliseconds=0x5) [0190.656] Sleep (dwMilliseconds=0x5) [0190.837] Sleep (dwMilliseconds=0x5) [0190.913] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0190.976] Sleep (dwMilliseconds=0x5) [0191.031] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0191.034] Sleep (dwMilliseconds=0x5) [0191.080] Sleep (dwMilliseconds=0x5) [0191.136] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0191.183] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0191.185] Sleep (dwMilliseconds=0x5) [0193.239] Sleep (dwMilliseconds=0x5) [0193.276] Sleep (dwMilliseconds=0x5) [0193.335] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.337] Sleep (dwMilliseconds=0x5) [0193.379] Sleep (dwMilliseconds=0x5) [0193.426] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.429] Sleep (dwMilliseconds=0x5) [0193.467] Sleep (dwMilliseconds=0x5) [0193.526] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.579] Sleep (dwMilliseconds=0x5) [0193.752] Sleep (dwMilliseconds=0x5) [0193.796] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.798] Sleep (dwMilliseconds=0x5) [0193.840] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.842] Sleep (dwMilliseconds=0x5) [0193.891] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.893] Sleep (dwMilliseconds=0x5) [0193.939] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.942] Sleep (dwMilliseconds=0x5) [0193.981] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0193.983] Sleep (dwMilliseconds=0x5) [0194.324] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.326] Sleep (dwMilliseconds=0x5) [0194.372] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.375] Sleep (dwMilliseconds=0x5) [0194.420] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.422] Sleep (dwMilliseconds=0x5) [0194.466] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.468] Sleep (dwMilliseconds=0x5) [0194.512] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.515] Sleep (dwMilliseconds=0x5) [0194.575] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.578] Sleep (dwMilliseconds=0x5) [0194.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.624] Sleep (dwMilliseconds=0x5) [0194.668] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.670] Sleep (dwMilliseconds=0x5) [0194.713] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.715] Sleep (dwMilliseconds=0x5) [0194.759] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.762] Sleep (dwMilliseconds=0x5) [0194.807] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.809] Sleep (dwMilliseconds=0x5) [0194.859] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.861] Sleep (dwMilliseconds=0x5) [0194.900] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.903] Sleep (dwMilliseconds=0x5) [0194.949] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0194.951] Sleep (dwMilliseconds=0x5) [0194.997] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.000] Sleep (dwMilliseconds=0x5) [0195.044] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.047] Sleep (dwMilliseconds=0x5) [0195.094] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.096] Sleep (dwMilliseconds=0x5) [0195.149] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.152] Sleep (dwMilliseconds=0x5) [0195.197] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.199] Sleep (dwMilliseconds=0x5) [0195.243] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.245] Sleep (dwMilliseconds=0x5) [0195.294] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.296] Sleep (dwMilliseconds=0x5) [0195.336] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.338] Sleep (dwMilliseconds=0x5) [0195.388] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.390] Sleep (dwMilliseconds=0x5) [0195.432] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.434] Sleep (dwMilliseconds=0x5) [0195.477] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.479] Sleep (dwMilliseconds=0x5) [0195.523] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.525] Sleep (dwMilliseconds=0x5) [0195.572] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.574] Sleep (dwMilliseconds=0x5) [0195.617] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.619] Sleep (dwMilliseconds=0x5) [0195.669] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.671] Sleep (dwMilliseconds=0x5) [0195.712] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.714] Sleep (dwMilliseconds=0x5) [0195.761] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.763] Sleep (dwMilliseconds=0x5) [0195.803] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.806] Sleep (dwMilliseconds=0x5) [0195.851] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.853] Sleep (dwMilliseconds=0x5) [0195.973] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0195.974] Sleep (dwMilliseconds=0x5) [0196.027] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.030] Sleep (dwMilliseconds=0x5) [0196.070] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.073] Sleep (dwMilliseconds=0x5) [0196.164] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.166] Sleep (dwMilliseconds=0x5) [0196.214] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.217] Sleep (dwMilliseconds=0x5) [0196.258] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.261] Sleep (dwMilliseconds=0x5) [0196.302] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.304] Sleep (dwMilliseconds=0x5) [0196.359] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.362] Sleep (dwMilliseconds=0x5) [0196.398] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.400] Sleep (dwMilliseconds=0x5) [0196.445] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.447] Sleep (dwMilliseconds=0x5) [0196.492] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.494] Sleep (dwMilliseconds=0x5) [0196.536] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.539] Sleep (dwMilliseconds=0x5) [0196.586] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.589] Sleep (dwMilliseconds=0x5) [0196.632] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.634] Sleep (dwMilliseconds=0x5) [0196.679] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.682] Sleep (dwMilliseconds=0x5) [0196.725] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.727] Sleep (dwMilliseconds=0x5) [0196.773] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.775] Sleep (dwMilliseconds=0x5) [0196.817] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.820] Sleep (dwMilliseconds=0x5) [0196.864] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.866] Sleep (dwMilliseconds=0x5) [0196.915] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.917] Sleep (dwMilliseconds=0x5) [0196.960] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0196.962] Sleep (dwMilliseconds=0x5) [0197.007] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.010] Sleep (dwMilliseconds=0x5) [0197.053] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.055] Sleep (dwMilliseconds=0x5) [0197.100] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.103] Sleep (dwMilliseconds=0x5) [0197.148] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.151] Sleep (dwMilliseconds=0x5) [0197.195] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.197] Sleep (dwMilliseconds=0x5) [0197.240] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.242] Sleep (dwMilliseconds=0x5) [0197.301] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.307] Sleep (dwMilliseconds=0x5) [0197.350] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.353] Sleep (dwMilliseconds=0x5) [0197.410] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.412] Sleep (dwMilliseconds=0x5) [0197.461] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.463] Sleep (dwMilliseconds=0x5) [0197.508] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.510] Sleep (dwMilliseconds=0x5) [0197.551] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.553] Sleep (dwMilliseconds=0x5) [0197.598] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.600] Sleep (dwMilliseconds=0x5) [0197.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.650] Sleep (dwMilliseconds=0x5) [0197.693] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.696] Sleep (dwMilliseconds=0x5) [0197.737] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.739] Sleep (dwMilliseconds=0x5) [0197.786] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.788] Sleep (dwMilliseconds=0x5) [0197.832] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.834] Sleep (dwMilliseconds=0x5) [0197.879] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.881] Sleep (dwMilliseconds=0x5) [0197.925] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.927] Sleep (dwMilliseconds=0x5) [0197.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0197.976] Sleep (dwMilliseconds=0x5) [0198.019] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.021] Sleep (dwMilliseconds=0x5) [0198.066] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.068] Sleep (dwMilliseconds=0x5) [0198.122] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.124] Sleep (dwMilliseconds=0x5) [0198.161] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.163] Sleep (dwMilliseconds=0x5) [0198.207] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.209] Sleep (dwMilliseconds=0x5) [0198.262] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.306] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.309] Sleep (dwMilliseconds=0x5) [0198.355] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.357] Sleep (dwMilliseconds=0x5) [0198.389] Sleep (dwMilliseconds=0x5) [0198.429] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.431] Sleep (dwMilliseconds=0x5) [0198.474] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.477] Sleep (dwMilliseconds=0x5) [0198.520] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.522] Sleep (dwMilliseconds=0x5) [0198.568] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.571] Sleep (dwMilliseconds=0x5) [0198.611] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.613] Sleep (dwMilliseconds=0x5) [0198.659] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.661] Sleep (dwMilliseconds=0x5) [0198.709] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.711] Sleep (dwMilliseconds=0x5) [0198.754] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.756] Sleep (dwMilliseconds=0x5) [0198.801] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.804] Sleep (dwMilliseconds=0x5) [0198.847] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.849] Sleep (dwMilliseconds=0x5) [0198.895] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.898] Sleep (dwMilliseconds=0x5) [0198.942] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.944] Sleep (dwMilliseconds=0x5) [0198.989] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0198.991] Sleep (dwMilliseconds=0x5) [0199.035] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.037] Sleep (dwMilliseconds=0x5) [0199.081] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.083] Sleep (dwMilliseconds=0x5) [0199.127] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.129] Sleep (dwMilliseconds=0x5) [0199.176] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.178] Sleep (dwMilliseconds=0x5) [0199.224] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.226] Sleep (dwMilliseconds=0x5) [0199.270] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.272] Sleep (dwMilliseconds=0x5) [0199.314] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.317] Sleep (dwMilliseconds=0x5) [0199.360] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.362] Sleep (dwMilliseconds=0x5) [0199.409] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.411] Sleep (dwMilliseconds=0x5) [0199.461] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.463] Sleep (dwMilliseconds=0x5) [0199.505] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.508] Sleep (dwMilliseconds=0x5) [0199.559] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.561] Sleep (dwMilliseconds=0x5) [0199.600] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.602] Sleep (dwMilliseconds=0x5) [0199.647] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.650] Sleep (dwMilliseconds=0x5) [0199.691] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.693] Sleep (dwMilliseconds=0x5) [0199.737] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.739] Sleep (dwMilliseconds=0x5) [0199.788] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.791] Sleep (dwMilliseconds=0x5) [0199.831] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.834] Sleep (dwMilliseconds=0x5) [0199.884] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.887] Sleep (dwMilliseconds=0x5) [0199.943] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.945] Sleep (dwMilliseconds=0x5) [0199.988] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0199.990] Sleep (dwMilliseconds=0x5) [0200.036] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.038] Sleep (dwMilliseconds=0x5) [0200.083] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.085] Sleep (dwMilliseconds=0x5) [0200.142] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.145] Sleep (dwMilliseconds=0x5) [0200.191] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.193] Sleep (dwMilliseconds=0x5) [0200.237] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.240] Sleep (dwMilliseconds=0x5) [0200.284] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.286] Sleep (dwMilliseconds=0x5) [0200.333] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.336] Sleep (dwMilliseconds=0x5) [0200.394] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.396] Sleep (dwMilliseconds=0x5) [0200.442] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.445] Sleep (dwMilliseconds=0x5) [0200.501] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.504] Sleep (dwMilliseconds=0x5) [0200.550] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.553] Sleep (dwMilliseconds=0x5) [0200.595] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.597] Sleep (dwMilliseconds=0x5) [0200.643] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.646] Sleep (dwMilliseconds=0x5) [0200.689] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.691] Sleep (dwMilliseconds=0x5) [0200.751] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.753] Sleep (dwMilliseconds=0x5) [0200.800] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.802] Sleep (dwMilliseconds=0x5) [0200.844] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.847] Sleep (dwMilliseconds=0x5) [0200.892] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.893] Sleep (dwMilliseconds=0x5) [0200.938] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.940] Sleep (dwMilliseconds=0x5) [0200.995] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0200.998] Sleep (dwMilliseconds=0x5) [0201.050] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.052] Sleep (dwMilliseconds=0x5) [0201.093] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.095] Sleep (dwMilliseconds=0x5) [0201.186] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.189] Sleep (dwMilliseconds=0x5) [0201.235] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.238] Sleep (dwMilliseconds=0x5) [0201.280] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.283] Sleep (dwMilliseconds=0x5) [0201.330] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.333] Sleep (dwMilliseconds=0x5) [0201.378] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.381] Sleep (dwMilliseconds=0x5) [0201.425] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.428] Sleep (dwMilliseconds=0x5) [0201.471] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.474] Sleep (dwMilliseconds=0x5) [0201.517] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.520] Sleep (dwMilliseconds=0x5) [0201.579] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.582] Sleep (dwMilliseconds=0x5) [0201.626] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.629] Sleep (dwMilliseconds=0x5) [0201.672] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.675] Sleep (dwMilliseconds=0x5) [0201.717] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.720] Sleep (dwMilliseconds=0x5) [0201.764] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.767] Sleep (dwMilliseconds=0x5) [0201.814] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.817] Sleep (dwMilliseconds=0x5) [0201.859] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.861] Sleep (dwMilliseconds=0x5) [0201.906] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.908] Sleep (dwMilliseconds=0x5) [0201.950] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.953] Sleep (dwMilliseconds=0x5) [0201.997] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0201.999] Sleep (dwMilliseconds=0x5) [0202.049] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.051] Sleep (dwMilliseconds=0x5) [0202.093] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.095] Sleep (dwMilliseconds=0x5) [0202.139] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.141] Sleep (dwMilliseconds=0x5) [0202.187] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.190] Sleep (dwMilliseconds=0x5) [0202.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.234] Sleep (dwMilliseconds=0x5) [0202.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.279] Sleep (dwMilliseconds=0x5) [0202.331] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.333] Sleep (dwMilliseconds=0x5) [0202.374] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.377] Sleep (dwMilliseconds=0x5) [0202.420] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.425] Sleep (dwMilliseconds=0x5) [0202.464] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.467] Sleep (dwMilliseconds=0x5) [0202.514] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.516] Sleep (dwMilliseconds=0x5) [0202.561] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.563] Sleep (dwMilliseconds=0x5) [0202.607] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.609] Sleep (dwMilliseconds=0x5) [0202.669] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.671] Sleep (dwMilliseconds=0x5) [0202.714] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.716] Sleep (dwMilliseconds=0x5) [0202.770] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.773] Sleep (dwMilliseconds=0x5) [0202.811] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.813] Sleep (dwMilliseconds=0x5) [0202.858] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.860] Sleep (dwMilliseconds=0x5) [0202.904] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.907] Sleep (dwMilliseconds=0x5) [0202.958] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0202.960] Sleep (dwMilliseconds=0x5) [0203.042] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.044] Sleep (dwMilliseconds=0x5) [0203.091] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.093] Sleep (dwMilliseconds=0x5) [0203.136] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.138] Sleep (dwMilliseconds=0x5) [0203.183] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.185] Sleep (dwMilliseconds=0x5) [0203.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.234] Sleep (dwMilliseconds=0x5) [0203.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.279] Sleep (dwMilliseconds=0x5) [0203.325] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.327] Sleep (dwMilliseconds=0x5) [0203.370] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.373] Sleep (dwMilliseconds=0x5) [0203.419] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.421] Sleep (dwMilliseconds=0x5) [0203.464] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.466] Sleep (dwMilliseconds=0x5) [0203.511] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.514] Sleep (dwMilliseconds=0x5) [0203.558] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.560] Sleep (dwMilliseconds=0x5) [0203.604] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.606] Sleep (dwMilliseconds=0x5) [0203.661] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.663] Sleep (dwMilliseconds=0x5) [0203.699] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.701] Sleep (dwMilliseconds=0x5) [0203.744] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.746] Sleep (dwMilliseconds=0x5) [0203.791] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.793] Sleep (dwMilliseconds=0x5) [0203.839] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.841] Sleep (dwMilliseconds=0x5) [0203.887] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.890] Sleep (dwMilliseconds=0x5) [0203.947] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0203.950] Sleep (dwMilliseconds=0x5) [0203.998] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.000] Sleep (dwMilliseconds=0x5) [0204.041] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.044] Sleep (dwMilliseconds=0x5) [0204.089] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.090] Sleep (dwMilliseconds=0x5) [0204.135] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.137] Sleep (dwMilliseconds=0x5) [0204.184] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.186] Sleep (dwMilliseconds=0x5) [0204.230] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.232] Sleep (dwMilliseconds=0x5) [0204.275] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.277] Sleep (dwMilliseconds=0x5) [0204.326] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.329] Sleep (dwMilliseconds=0x5) [0204.373] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.375] Sleep (dwMilliseconds=0x5) [0204.421] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.423] Sleep (dwMilliseconds=0x5) [0204.468] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.472] Sleep (dwMilliseconds=0x5) [0204.512] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.515] Sleep (dwMilliseconds=0x5) [0204.560] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.562] Sleep (dwMilliseconds=0x5) [0204.605] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.668] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.670] Sleep (dwMilliseconds=0x5) [0204.715] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.717] Sleep (dwMilliseconds=0x5) [0204.761] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.763] Sleep (dwMilliseconds=0x5) [0204.806] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.808] Sleep (dwMilliseconds=0x5) [0204.871] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.876] Sleep (dwMilliseconds=0x5) [0204.917] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.920] Sleep (dwMilliseconds=0x5) [0204.967] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0204.970] Sleep (dwMilliseconds=0x5) [0205.011] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.014] Sleep (dwMilliseconds=0x5) [0205.056] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.059] Sleep (dwMilliseconds=0x5) [0205.113] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.122] Sleep (dwMilliseconds=0x5) [0205.165] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.168] Sleep (dwMilliseconds=0x5) [0205.215] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.218] Sleep (dwMilliseconds=0x5) [0205.260] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.262] Sleep (dwMilliseconds=0x5) [0205.308] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.311] Sleep (dwMilliseconds=0x5) [0205.354] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.356] Sleep (dwMilliseconds=0x5) [0205.401] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.403] Sleep (dwMilliseconds=0x5) [0205.444] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.447] Sleep (dwMilliseconds=0x5) [0205.494] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.496] Sleep (dwMilliseconds=0x5) [0205.538] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.540] Sleep (dwMilliseconds=0x5) [0205.585] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.587] Sleep (dwMilliseconds=0x5) [0205.631] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.635] Sleep (dwMilliseconds=0x5) [0205.679] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.681] Sleep (dwMilliseconds=0x5) [0205.725] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.727] Sleep (dwMilliseconds=0x5) [0205.775] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.777] Sleep (dwMilliseconds=0x5) [0205.821] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.822] Sleep (dwMilliseconds=0x5) [0205.868] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.870] Sleep (dwMilliseconds=0x5) [0205.923] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.925] Sleep (dwMilliseconds=0x5) [0205.978] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0205.980] Sleep (dwMilliseconds=0x5) [0206.022] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.024] Sleep (dwMilliseconds=0x5) [0206.070] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.072] Sleep (dwMilliseconds=0x5) [0206.162] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.164] Sleep (dwMilliseconds=0x5) [0206.210] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.212] Sleep (dwMilliseconds=0x5) [0206.260] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.262] Sleep (dwMilliseconds=0x5) [0206.303] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.305] Sleep (dwMilliseconds=0x5) [0206.353] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.355] Sleep (dwMilliseconds=0x5) [0206.399] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.401] Sleep (dwMilliseconds=0x5) [0206.444] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.446] Sleep (dwMilliseconds=0x5) [0206.491] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.493] Sleep (dwMilliseconds=0x5) [0206.538] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.540] Sleep (dwMilliseconds=0x5) [0206.587] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.589] Sleep (dwMilliseconds=0x5) [0206.631] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.633] Sleep (dwMilliseconds=0x5) [0206.680] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.684] Sleep (dwMilliseconds=0x5) [0206.725] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.727] Sleep (dwMilliseconds=0x5) [0206.770] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.772] Sleep (dwMilliseconds=0x5) [0206.820] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.822] Sleep (dwMilliseconds=0x5) [0206.866] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.867] Sleep (dwMilliseconds=0x5) [0206.919] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.921] Sleep (dwMilliseconds=0x5) [0206.977] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0206.979] Sleep (dwMilliseconds=0x5) [0207.023] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.025] Sleep (dwMilliseconds=0x5) [0207.084] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.086] Sleep (dwMilliseconds=0x5) [0207.131] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.132] Sleep (dwMilliseconds=0x5) [0207.179] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.181] Sleep (dwMilliseconds=0x5) [0207.224] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.226] Sleep (dwMilliseconds=0x5) [0207.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.279] Sleep (dwMilliseconds=0x5) [0207.324] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.326] Sleep (dwMilliseconds=0x5) [0207.372] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.375] Sleep (dwMilliseconds=0x5) [0207.426] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.428] Sleep (dwMilliseconds=0x5) [0207.481] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.484] Sleep (dwMilliseconds=0x5) [0207.522] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.524] Sleep (dwMilliseconds=0x5) [0207.567] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.569] Sleep (dwMilliseconds=0x5) [0207.614] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.616] Sleep (dwMilliseconds=0x5) [0207.662] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.665] Sleep (dwMilliseconds=0x5) [0207.712] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.717] Sleep (dwMilliseconds=0x5) [0207.754] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.756] Sleep (dwMilliseconds=0x5) [0207.800] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.803] Sleep (dwMilliseconds=0x5) [0207.859] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.861] Sleep (dwMilliseconds=0x5) [0207.897] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.899] Sleep (dwMilliseconds=0x5) [0207.941] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.943] Sleep (dwMilliseconds=0x5) [0207.989] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0207.991] Sleep (dwMilliseconds=0x5) [0208.038] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.040] Sleep (dwMilliseconds=0x5) [0208.084] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.086] Sleep (dwMilliseconds=0x5) [0208.129] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.131] Sleep (dwMilliseconds=0x5) [0208.176] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.178] Sleep (dwMilliseconds=0x5) [0208.224] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.226] Sleep (dwMilliseconds=0x5) [0208.269] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.270] Sleep (dwMilliseconds=0x5) [0208.315] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.317] Sleep (dwMilliseconds=0x5) [0208.363] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.365] Sleep (dwMilliseconds=0x5) [0208.411] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.413] Sleep (dwMilliseconds=0x5) [0208.456] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.457] Sleep (dwMilliseconds=0x5) [0208.505] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.507] Sleep (dwMilliseconds=0x5) [0208.550] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.552] Sleep (dwMilliseconds=0x5) [0208.597] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.599] Sleep (dwMilliseconds=0x5) [0208.645] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.647] Sleep (dwMilliseconds=0x5) [0208.691] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.693] Sleep (dwMilliseconds=0x5) [0208.740] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.742] Sleep (dwMilliseconds=0x5) [0208.783] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.786] Sleep (dwMilliseconds=0x5) [0208.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.832] Sleep (dwMilliseconds=0x5) [0208.878] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.880] Sleep (dwMilliseconds=0x5) [0208.925] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.927] Sleep (dwMilliseconds=0x5) [0208.972] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0208.974] Sleep (dwMilliseconds=0x5) [0209.018] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.020] Sleep (dwMilliseconds=0x5) [0209.064] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.066] Sleep (dwMilliseconds=0x5) [0209.115] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.117] Sleep (dwMilliseconds=0x5) [0209.158] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.160] Sleep (dwMilliseconds=0x5) [0209.207] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.209] Sleep (dwMilliseconds=0x5) [0209.251] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.253] Sleep (dwMilliseconds=0x5) [0209.301] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.303] Sleep (dwMilliseconds=0x5) [0209.346] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.348] Sleep (dwMilliseconds=0x5) [0209.394] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.396] Sleep (dwMilliseconds=0x5) [0209.440] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0209.442] Sleep (dwMilliseconds=0x5) [0209.953] Sleep (dwMilliseconds=0x5) [0210.002] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.005] Sleep (dwMilliseconds=0x5) [0210.050] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.053] Sleep (dwMilliseconds=0x5) [0210.099] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.102] Sleep (dwMilliseconds=0x5) [0210.143] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.145] Sleep (dwMilliseconds=0x5) [0210.192] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.194] Sleep (dwMilliseconds=0x5) [0210.236] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.239] Sleep (dwMilliseconds=0x5) [0210.283] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.286] Sleep (dwMilliseconds=0x5) [0210.331] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.334] Sleep (dwMilliseconds=0x5) [0210.381] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.383] Sleep (dwMilliseconds=0x5) [0210.426] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.429] Sleep (dwMilliseconds=0x5) [0210.469] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.471] Sleep (dwMilliseconds=0x5) [0210.517] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.519] Sleep (dwMilliseconds=0x5) [0210.566] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.568] Sleep (dwMilliseconds=0x5) [0210.612] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.614] Sleep (dwMilliseconds=0x5) [0210.655] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.657] Sleep (dwMilliseconds=0x5) [0210.705] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.708] Sleep (dwMilliseconds=0x5) [0210.751] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.752] Sleep (dwMilliseconds=0x5) [0210.801] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.803] Sleep (dwMilliseconds=0x5) [0210.844] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.846] Sleep (dwMilliseconds=0x5) [0210.888] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.890] Sleep (dwMilliseconds=0x5) [0210.936] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.938] Sleep (dwMilliseconds=0x5) [0210.987] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0210.990] Sleep (dwMilliseconds=0x5) [0211.042] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.044] Sleep (dwMilliseconds=0x5) [0211.084] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.086] Sleep (dwMilliseconds=0x5) [0211.127] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.130] Sleep (dwMilliseconds=0x5) [0211.176] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.178] Sleep (dwMilliseconds=0x5) [0211.218] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.220] Sleep (dwMilliseconds=0x5) [0211.265] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.267] Sleep (dwMilliseconds=0x5) [0211.312] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.314] Sleep (dwMilliseconds=0x5) [0211.358] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.360] Sleep (dwMilliseconds=0x5) [0211.404] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.406] Sleep (dwMilliseconds=0x5) [0211.458] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.460] Sleep (dwMilliseconds=0x5) [0211.501] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.503] Sleep (dwMilliseconds=0x5) [0211.544] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.545] Sleep (dwMilliseconds=0x5) [0211.638] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.639] Sleep (dwMilliseconds=0x5) [0211.686] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.688] Sleep (dwMilliseconds=0x5) [0211.735] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.737] Sleep (dwMilliseconds=0x5) [0211.784] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.787] Sleep (dwMilliseconds=0x5) [0211.828] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.830] Sleep (dwMilliseconds=0x5) [0211.874] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.877] Sleep (dwMilliseconds=0x5) [0211.923] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.926] Sleep (dwMilliseconds=0x5) [0211.971] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0211.973] Sleep (dwMilliseconds=0x5) [0212.014] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.016] Sleep (dwMilliseconds=0x5) [0212.063] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.066] Sleep (dwMilliseconds=0x5) [0212.108] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.111] Sleep (dwMilliseconds=0x5) [0212.171] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.173] Sleep (dwMilliseconds=0x5) [0212.217] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.219] Sleep (dwMilliseconds=0x5) [0212.264] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.266] Sleep (dwMilliseconds=0x5) [0212.313] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.316] Sleep (dwMilliseconds=0x5) [0212.358] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.360] Sleep (dwMilliseconds=0x5) [0212.415] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.417] Sleep (dwMilliseconds=0x5) [0212.468] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.470] Sleep (dwMilliseconds=0x5) [0212.517] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.520] Sleep (dwMilliseconds=0x5) [0212.560] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.562] Sleep (dwMilliseconds=0x5) [0212.606] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.608] Sleep (dwMilliseconds=0x5) [0212.654] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.656] Sleep (dwMilliseconds=0x5) [0212.700] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.702] Sleep (dwMilliseconds=0x5) [0212.748] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.750] Sleep (dwMilliseconds=0x5) [0212.797] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.799] Sleep (dwMilliseconds=0x5) [0212.843] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.845] Sleep (dwMilliseconds=0x5) [0212.891] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.894] Sleep (dwMilliseconds=0x5) [0212.939] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.941] Sleep (dwMilliseconds=0x5) [0212.982] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0212.984] Sleep (dwMilliseconds=0x5) [0213.034] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.037] Sleep (dwMilliseconds=0x5) [0213.074] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.076] Sleep (dwMilliseconds=0x5) [0213.121] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.124] Sleep (dwMilliseconds=0x5) [0213.170] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.181] Sleep (dwMilliseconds=0x5) [0213.231] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.233] Sleep (dwMilliseconds=0x5) [0213.280] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.282] Sleep (dwMilliseconds=0x5) [0213.327] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.329] Sleep (dwMilliseconds=0x5) [0213.373] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.376] Sleep (dwMilliseconds=0x5) [0213.434] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.437] Sleep (dwMilliseconds=0x5) [0213.483] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.486] Sleep (dwMilliseconds=0x5) [0213.531] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.535] Sleep (dwMilliseconds=0x5) [0213.575] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.578] Sleep (dwMilliseconds=0x5) [0213.621] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.623] Sleep (dwMilliseconds=0x5) [0213.667] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.669] Sleep (dwMilliseconds=0x5) [0213.716] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.719] Sleep (dwMilliseconds=0x5) [0213.761] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.763] Sleep (dwMilliseconds=0x5) [0213.810] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.812] Sleep (dwMilliseconds=0x5) [0213.857] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.859] Sleep (dwMilliseconds=0x5) [0213.903] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.905] Sleep (dwMilliseconds=0x5) [0213.948] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.950] Sleep (dwMilliseconds=0x5) [0213.994] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0213.997] Sleep (dwMilliseconds=0x5) [0214.043] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.046] Sleep (dwMilliseconds=0x5) [0214.092] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.095] Sleep (dwMilliseconds=0x5) [0214.143] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.145] Sleep (dwMilliseconds=0x5) [0214.187] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.189] Sleep (dwMilliseconds=0x5) [0214.246] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.249] Sleep (dwMilliseconds=0x5) [0214.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.294] Sleep (dwMilliseconds=0x5) [0214.341] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.344] Sleep (dwMilliseconds=0x5) [0214.389] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.391] Sleep (dwMilliseconds=0x5) [0214.451] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.454] Sleep (dwMilliseconds=0x5) [0214.498] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.501] Sleep (dwMilliseconds=0x5) [0214.543] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.545] Sleep (dwMilliseconds=0x5) [0214.591] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.594] Sleep (dwMilliseconds=0x5) [0214.680] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.682] Sleep (dwMilliseconds=0x5) [0214.728] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.731] Sleep (dwMilliseconds=0x5) [0214.780] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.783] Sleep (dwMilliseconds=0x5) [0214.825] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.827] Sleep (dwMilliseconds=0x5) [0214.869] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.871] Sleep (dwMilliseconds=0x5) [0214.915] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.917] Sleep (dwMilliseconds=0x5) [0214.961] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0214.963] Sleep (dwMilliseconds=0x5) [0215.008] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.010] Sleep (dwMilliseconds=0x5) [0215.049] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.051] Sleep (dwMilliseconds=0x5) [0215.091] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.093] Sleep (dwMilliseconds=0x5) [0215.138] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.141] Sleep (dwMilliseconds=0x5) [0215.182] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.184] Sleep (dwMilliseconds=0x5) [0215.235] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.237] Sleep (dwMilliseconds=0x5) [0215.276] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.278] Sleep (dwMilliseconds=0x5) [0215.322] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.328] Sleep (dwMilliseconds=0x5) [0215.384] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.386] Sleep (dwMilliseconds=0x5) [0215.433] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.435] Sleep (dwMilliseconds=0x5) [0215.480] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.482] Sleep (dwMilliseconds=0x5) [0215.527] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.529] Sleep (dwMilliseconds=0x5) [0215.571] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.573] Sleep (dwMilliseconds=0x5) [0215.617] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.620] Sleep (dwMilliseconds=0x5) [0215.668] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.670] Sleep (dwMilliseconds=0x5) [0215.715] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.717] Sleep (dwMilliseconds=0x5) [0215.758] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.761] Sleep (dwMilliseconds=0x5) [0215.804] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.806] Sleep (dwMilliseconds=0x5) [0215.851] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.853] Sleep (dwMilliseconds=0x5) [0215.898] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.900] Sleep (dwMilliseconds=0x5) [0215.947] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.949] Sleep (dwMilliseconds=0x5) [0215.992] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0215.993] Sleep (dwMilliseconds=0x5) [0216.038] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.040] Sleep (dwMilliseconds=0x5) [0216.084] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.086] Sleep (dwMilliseconds=0x5) [0216.131] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.133] Sleep (dwMilliseconds=0x5) [0216.179] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.181] Sleep (dwMilliseconds=0x5) [0216.236] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.238] Sleep (dwMilliseconds=0x5) [0216.286] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.288] Sleep (dwMilliseconds=0x5) [0216.335] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.338] Sleep (dwMilliseconds=0x5) [0216.382] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.384] Sleep (dwMilliseconds=0x5) [0216.427] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.430] Sleep (dwMilliseconds=0x5) [0216.476] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.478] Sleep (dwMilliseconds=0x5) [0216.522] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.524] Sleep (dwMilliseconds=0x5) [0216.588] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.590] Sleep (dwMilliseconds=0x5) [0216.683] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.686] Sleep (dwMilliseconds=0x5) [0216.730] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.732] Sleep (dwMilliseconds=0x5) [0216.772] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.773] Sleep (dwMilliseconds=0x5) [0216.820] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.822] Sleep (dwMilliseconds=0x5) [0216.867] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.869] Sleep (dwMilliseconds=0x5) [0216.910] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.912] Sleep (dwMilliseconds=0x5) [0216.957] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0216.959] Sleep (dwMilliseconds=0x5) [0217.007] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.009] Sleep (dwMilliseconds=0x5) [0217.052] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.054] Sleep (dwMilliseconds=0x5) [0217.099] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.101] Sleep (dwMilliseconds=0x5) [0217.146] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.148] Sleep (dwMilliseconds=0x5) [0217.202] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.204] Sleep (dwMilliseconds=0x5) [0217.255] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.257] Sleep (dwMilliseconds=0x5) [0217.301] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.303] Sleep (dwMilliseconds=0x5) [0217.352] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.354] Sleep (dwMilliseconds=0x5) [0217.396] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.398] Sleep (dwMilliseconds=0x5) [0217.461] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.463] Sleep (dwMilliseconds=0x5) [0217.504] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.505] Sleep (dwMilliseconds=0x5) [0217.552] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.554] Sleep (dwMilliseconds=0x5) [0217.600] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.602] Sleep (dwMilliseconds=0x5) [0217.643] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.646] Sleep (dwMilliseconds=0x5) [0217.694] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.697] Sleep (dwMilliseconds=0x5) [0217.739] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.742] Sleep (dwMilliseconds=0x5) [0217.786] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.788] Sleep (dwMilliseconds=0x5) [0217.832] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.835] Sleep (dwMilliseconds=0x5) [0217.878] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.880] Sleep (dwMilliseconds=0x5) [0217.923] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0217.925] Sleep (dwMilliseconds=0x5) [0217.980] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.023] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.026] Sleep (dwMilliseconds=0x5) [0218.068] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.070] Sleep (dwMilliseconds=0x5) [0218.117] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.119] Sleep (dwMilliseconds=0x5) [0218.160] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.162] Sleep (dwMilliseconds=0x5) [0218.208] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.211] Sleep (dwMilliseconds=0x5) [0218.270] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.273] Sleep (dwMilliseconds=0x5) [0218.318] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.319] Sleep (dwMilliseconds=0x5) [0218.362] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.365] Sleep (dwMilliseconds=0x5) [0218.409] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.412] Sleep (dwMilliseconds=0x5) [0218.460] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.463] Sleep (dwMilliseconds=0x5) [0218.503] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.506] Sleep (dwMilliseconds=0x5) [0218.554] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.557] Sleep (dwMilliseconds=0x5) [0218.601] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.603] Sleep (dwMilliseconds=0x5) [0218.646] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.649] Sleep (dwMilliseconds=0x5) [0218.692] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.694] Sleep (dwMilliseconds=0x5) [0218.740] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.744] Sleep (dwMilliseconds=0x5) [0218.786] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.789] Sleep (dwMilliseconds=0x5) [0218.832] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.836] Sleep (dwMilliseconds=0x5) [0218.882] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.884] Sleep (dwMilliseconds=0x5) [0218.925] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.927] Sleep (dwMilliseconds=0x5) [0218.972] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0218.975] Sleep (dwMilliseconds=0x5) [0219.019] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.022] Sleep (dwMilliseconds=0x5) [0219.066] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.069] Sleep (dwMilliseconds=0x5) [0219.113] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.116] Sleep (dwMilliseconds=0x5) [0219.175] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.177] Sleep (dwMilliseconds=0x5) [0219.225] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.227] Sleep (dwMilliseconds=0x5) [0219.268] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.270] Sleep (dwMilliseconds=0x5) [0219.316] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.328] Sleep (dwMilliseconds=0x5) [0219.380] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.382] Sleep (dwMilliseconds=0x5) [0219.424] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.426] Sleep (dwMilliseconds=0x5) [0219.474] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.477] Sleep (dwMilliseconds=0x5) [0219.517] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.520] Sleep (dwMilliseconds=0x5) [0219.570] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.572] Sleep (dwMilliseconds=0x5) [0219.625] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.628] Sleep (dwMilliseconds=0x5) [0219.673] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.675] Sleep (dwMilliseconds=0x5) [0219.718] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.720] Sleep (dwMilliseconds=0x5) [0219.767] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.769] Sleep (dwMilliseconds=0x5) [0219.813] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.814] Sleep (dwMilliseconds=0x5) [0219.859] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.861] Sleep (dwMilliseconds=0x5) [0219.908] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.910] Sleep (dwMilliseconds=0x5) [0219.954] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0219.956] Sleep (dwMilliseconds=0x5) [0220.002] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.004] Sleep (dwMilliseconds=0x5) [0220.047] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.048] Sleep (dwMilliseconds=0x5) [0220.095] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.097] Sleep (dwMilliseconds=0x5) [0220.139] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.141] Sleep (dwMilliseconds=0x5) [0220.187] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.189] Sleep (dwMilliseconds=0x5) [0220.236] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.238] Sleep (dwMilliseconds=0x5) [0220.280] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.282] Sleep (dwMilliseconds=0x5) [0220.336] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.338] Sleep (dwMilliseconds=0x5) [0220.374] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.375] Sleep (dwMilliseconds=0x5) [0220.422] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.424] Sleep (dwMilliseconds=0x5) [0220.471] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.473] Sleep (dwMilliseconds=0x5) [0220.514] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.516] Sleep (dwMilliseconds=0x5) [0220.562] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.564] Sleep (dwMilliseconds=0x5) [0220.610] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.612] Sleep (dwMilliseconds=0x5) [0220.654] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.656] Sleep (dwMilliseconds=0x5) [0220.704] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.706] Sleep (dwMilliseconds=0x5) [0220.750] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.752] Sleep (dwMilliseconds=0x5) [0220.796] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.798] Sleep (dwMilliseconds=0x5) [0220.842] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.844] Sleep (dwMilliseconds=0x5) [0220.892] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.894] Sleep (dwMilliseconds=0x5) [0220.937] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.939] Sleep (dwMilliseconds=0x5) [0220.983] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0220.984] Sleep (dwMilliseconds=0x5) [0221.031] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.033] Sleep (dwMilliseconds=0x5) [0221.078] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.080] Sleep (dwMilliseconds=0x5) [0221.123] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.124] Sleep (dwMilliseconds=0x5) [0221.171] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.172] Sleep (dwMilliseconds=0x5) [0221.219] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.221] Sleep (dwMilliseconds=0x5) [0221.264] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.266] Sleep (dwMilliseconds=0x5) [0221.311] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.313] Sleep (dwMilliseconds=0x5) [0221.358] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.359] Sleep (dwMilliseconds=0x5) [0221.403] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.405] Sleep (dwMilliseconds=0x5) [0221.416] Sleep (dwMilliseconds=0x5) [0221.436] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.438] Sleep (dwMilliseconds=0x5) [0221.449] Sleep (dwMilliseconds=0x5) [0221.467] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.469] Sleep (dwMilliseconds=0x5) [0221.498] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.501] Sleep (dwMilliseconds=0x5) [0221.544] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.546] Sleep (dwMilliseconds=0x5) [0221.595] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.597] Sleep (dwMilliseconds=0x5) [0221.667] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.669] Sleep (dwMilliseconds=0x5) [0221.717] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.719] Sleep (dwMilliseconds=0x5) [0221.763] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.765] Sleep (dwMilliseconds=0x5) [0221.812] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.814] Sleep (dwMilliseconds=0x5) [0221.857] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.859] Sleep (dwMilliseconds=0x5) [0221.903] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0221.905] Sleep (dwMilliseconds=0x5) [0222.182] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.184] Sleep (dwMilliseconds=0x5) [0222.231] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.234] Sleep (dwMilliseconds=0x5) [0222.281] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.284] Sleep (dwMilliseconds=0x5) [0222.325] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.328] Sleep (dwMilliseconds=0x5) [0222.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.379] Sleep (dwMilliseconds=0x5) [0222.421] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.423] Sleep (dwMilliseconds=0x5) [0222.464] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.466] Sleep (dwMilliseconds=0x5) [0222.504] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.506] Sleep (dwMilliseconds=0x5) [0222.542] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.544] Sleep (dwMilliseconds=0x5) [0222.589] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.592] Sleep (dwMilliseconds=0x5) [0222.635] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.637] Sleep (dwMilliseconds=0x5) [0222.682] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.684] Sleep (dwMilliseconds=0x5) [0222.731] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.732] Sleep (dwMilliseconds=0x5) [0222.776] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.777] Sleep (dwMilliseconds=0x5) [0222.823] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.824] Sleep (dwMilliseconds=0x5) [0222.871] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.873] Sleep (dwMilliseconds=0x5) [0222.916] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.918] Sleep (dwMilliseconds=0x5) [0222.966] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0222.968] Sleep (dwMilliseconds=0x5) [0223.011] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.013] Sleep (dwMilliseconds=0x5) [0223.058] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.060] Sleep (dwMilliseconds=0x5) [0223.105] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.107] Sleep (dwMilliseconds=0x5) [0223.152] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.154] Sleep (dwMilliseconds=0x5) [0223.200] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.202] Sleep (dwMilliseconds=0x5) [0223.244] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.246] Sleep (dwMilliseconds=0x5) [0223.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.294] Sleep (dwMilliseconds=0x5) [0223.340] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.342] Sleep (dwMilliseconds=0x5) [0223.385] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.386] Sleep (dwMilliseconds=0x5) [0223.432] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.434] Sleep (dwMilliseconds=0x5) [0223.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.481] Sleep (dwMilliseconds=0x5) [0223.528] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.530] Sleep (dwMilliseconds=0x5) [0223.575] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.577] Sleep (dwMilliseconds=0x5) [0223.626] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.628] Sleep (dwMilliseconds=0x5) [0223.667] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.669] Sleep (dwMilliseconds=0x5) [0223.714] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.715] Sleep (dwMilliseconds=0x5) [0223.761] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.762] Sleep (dwMilliseconds=0x5) [0223.808] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.810] Sleep (dwMilliseconds=0x5) [0223.855] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.904] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.906] Sleep (dwMilliseconds=0x5) [0223.949] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.952] Sleep (dwMilliseconds=0x5) [0223.997] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0223.999] Sleep (dwMilliseconds=0x5) [0224.046] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.049] Sleep (dwMilliseconds=0x5) [0224.090] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.092] Sleep (dwMilliseconds=0x5) [0224.137] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.139] Sleep (dwMilliseconds=0x5) [0224.181] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.183] Sleep (dwMilliseconds=0x5) [0224.229] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.232] Sleep (dwMilliseconds=0x5) [0224.278] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.280] Sleep (dwMilliseconds=0x5) [0224.327] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.329] Sleep (dwMilliseconds=0x5) [0224.371] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.374] Sleep (dwMilliseconds=0x5) [0224.416] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.418] Sleep (dwMilliseconds=0x5) [0224.464] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.466] Sleep (dwMilliseconds=0x5) [0224.513] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.515] Sleep (dwMilliseconds=0x5) [0224.570] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.572] Sleep (dwMilliseconds=0x5) [0224.626] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.628] Sleep (dwMilliseconds=0x5) [0224.681] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.683] Sleep (dwMilliseconds=0x5) [0224.727] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.729] Sleep (dwMilliseconds=0x5) [0224.776] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.778] Sleep (dwMilliseconds=0x5) [0224.826] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.828] Sleep (dwMilliseconds=0x5) [0224.869] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.871] Sleep (dwMilliseconds=0x5) [0224.915] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.917] Sleep (dwMilliseconds=0x5) [0224.960] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0224.962] Sleep (dwMilliseconds=0x5) [0225.011] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.013] Sleep (dwMilliseconds=0x5) [0225.057] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.059] Sleep (dwMilliseconds=0x5) [0225.100] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.102] Sleep (dwMilliseconds=0x5) [0225.148] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.151] Sleep (dwMilliseconds=0x5) [0225.194] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.196] Sleep (dwMilliseconds=0x5) [0225.241] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.243] Sleep (dwMilliseconds=0x5) [0225.288] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.290] Sleep (dwMilliseconds=0x5) [0225.335] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.337] Sleep (dwMilliseconds=0x5) [0225.383] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.385] Sleep (dwMilliseconds=0x5) [0225.428] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.430] Sleep (dwMilliseconds=0x5) [0225.476] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.479] Sleep (dwMilliseconds=0x5) [0225.525] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.527] Sleep (dwMilliseconds=0x5) [0225.589] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.592] Sleep (dwMilliseconds=0x5) [0225.631] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.633] Sleep (dwMilliseconds=0x5) [0225.680] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.682] Sleep (dwMilliseconds=0x5) [0225.726] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.728] Sleep (dwMilliseconds=0x5) [0225.771] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.773] Sleep (dwMilliseconds=0x5) [0225.823] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.825] Sleep (dwMilliseconds=0x5) [0225.865] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.867] Sleep (dwMilliseconds=0x5) [0225.911] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.913] Sleep (dwMilliseconds=0x5) [0225.959] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0225.961] Sleep (dwMilliseconds=0x5) [0226.005] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.007] Sleep (dwMilliseconds=0x5) [0226.055] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.057] Sleep (dwMilliseconds=0x5) [0226.099] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.101] Sleep (dwMilliseconds=0x5) [0226.146] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.196] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.198] Sleep (dwMilliseconds=0x5) [0226.241] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.243] Sleep (dwMilliseconds=0x5) [0226.288] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.290] Sleep (dwMilliseconds=0x5) [0226.339] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.340] Sleep (dwMilliseconds=0x5) [0226.381] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.383] Sleep (dwMilliseconds=0x5) [0226.431] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.433] Sleep (dwMilliseconds=0x5) [0226.473] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.475] Sleep (dwMilliseconds=0x5) [0226.486] Sleep (dwMilliseconds=0x5) [0226.505] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.506] Sleep (dwMilliseconds=0x5) [0226.517] Sleep (dwMilliseconds=0x5) [0226.535] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.537] Sleep (dwMilliseconds=0x5) [0226.550] Sleep (dwMilliseconds=0x5) [0226.569] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.571] Sleep (dwMilliseconds=0x5) [0226.579] Sleep (dwMilliseconds=0x5) [0226.600] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.602] Sleep (dwMilliseconds=0x5) [0226.619] Sleep (dwMilliseconds=0x5) [0226.631] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.632] Sleep (dwMilliseconds=0x5) [0226.661] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.663] Sleep (dwMilliseconds=0x5) [0226.708] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.710] Sleep (dwMilliseconds=0x5) [0226.754] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.757] Sleep (dwMilliseconds=0x5) [0226.800] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.802] Sleep (dwMilliseconds=0x5) [0226.899] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.901] Sleep (dwMilliseconds=0x5) [0226.945] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0226.947] Sleep (dwMilliseconds=0x5) [0226.991] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.004] Sleep (dwMilliseconds=0x5) [0227.053] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.057] Sleep (dwMilliseconds=0x5) [0227.102] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.105] Sleep (dwMilliseconds=0x5) [0227.162] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.165] Sleep (dwMilliseconds=0x5) [0227.211] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.213] Sleep (dwMilliseconds=0x5) [0227.254] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.258] Sleep (dwMilliseconds=0x5) [0227.269] Sleep (dwMilliseconds=0x5) [0227.286] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.288] Sleep (dwMilliseconds=0x5) [0227.298] Sleep (dwMilliseconds=0x5) [0227.313] Sleep (dwMilliseconds=0x5) [0227.333] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.335] Sleep (dwMilliseconds=0x5) [0227.345] Sleep (dwMilliseconds=0x5) [0227.365] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.367] Sleep (dwMilliseconds=0x5) [0227.393] Sleep (dwMilliseconds=0x5) [0227.430] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.432] Sleep (dwMilliseconds=0x5) [0227.476] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.478] Sleep (dwMilliseconds=0x5) [0227.523] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.526] Sleep (dwMilliseconds=0x5) [0227.569] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.571] Sleep (dwMilliseconds=0x5) [0227.627] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.630] Sleep (dwMilliseconds=0x5) [0227.678] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.681] Sleep (dwMilliseconds=0x5) [0227.725] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.728] Sleep (dwMilliseconds=0x5) [0227.771] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.773] Sleep (dwMilliseconds=0x5) [0227.824] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.826] Sleep (dwMilliseconds=0x5) [0227.868] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.870] Sleep (dwMilliseconds=0x5) [0227.913] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.915] Sleep (dwMilliseconds=0x5) [0227.958] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0227.960] Sleep (dwMilliseconds=0x5) [0228.008] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.010] Sleep (dwMilliseconds=0x5) [0228.051] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.053] Sleep (dwMilliseconds=0x5) [0228.098] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.101] Sleep (dwMilliseconds=0x5) [0228.144] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.146] Sleep (dwMilliseconds=0x5) [0228.193] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.195] Sleep (dwMilliseconds=0x5) [0228.238] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.240] Sleep (dwMilliseconds=0x5) [0228.287] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.289] Sleep (dwMilliseconds=0x5) [0228.334] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.336] Sleep (dwMilliseconds=0x5) [0228.380] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.383] Sleep (dwMilliseconds=0x5) [0228.425] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.428] Sleep (dwMilliseconds=0x5) [0228.472] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.474] Sleep (dwMilliseconds=0x5) [0228.519] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.521] Sleep (dwMilliseconds=0x5) [0228.567] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.569] Sleep (dwMilliseconds=0x5) [0228.626] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.629] Sleep (dwMilliseconds=0x5) [0228.676] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.678] Sleep (dwMilliseconds=0x5) [0228.724] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.726] Sleep (dwMilliseconds=0x5) [0228.769] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.771] Sleep (dwMilliseconds=0x5) [0228.819] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.821] Sleep (dwMilliseconds=0x5) [0228.865] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.867] Sleep (dwMilliseconds=0x5) [0228.908] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.911] Sleep (dwMilliseconds=0x5) [0228.959] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0228.961] Sleep (dwMilliseconds=0x5) [0229.007] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.010] Sleep (dwMilliseconds=0x5) [0229.053] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.055] Sleep (dwMilliseconds=0x5) [0229.097] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.099] Sleep (dwMilliseconds=0x5) [0229.142] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.144] Sleep (dwMilliseconds=0x5) [0229.190] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.193] Sleep (dwMilliseconds=0x5) [0229.239] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.241] Sleep (dwMilliseconds=0x5) [0229.288] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.290] Sleep (dwMilliseconds=0x5) [0229.331] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.333] Sleep (dwMilliseconds=0x5) [0229.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.379] Sleep (dwMilliseconds=0x5) [0229.424] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.426] Sleep (dwMilliseconds=0x5) [0229.469] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.471] Sleep (dwMilliseconds=0x5) [0229.518] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.520] Sleep (dwMilliseconds=0x5) [0229.569] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.571] Sleep (dwMilliseconds=0x5) [0229.619] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.621] Sleep (dwMilliseconds=0x5) [0229.694] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.696] Sleep (dwMilliseconds=0x5) [0229.738] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.741] Sleep (dwMilliseconds=0x5) [0229.783] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.785] Sleep (dwMilliseconds=0x5) [0229.829] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.832] Sleep (dwMilliseconds=0x5) [0229.880] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.883] Sleep (dwMilliseconds=0x5) [0229.925] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.927] Sleep (dwMilliseconds=0x5) [0229.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0229.976] Sleep (dwMilliseconds=0x5) [0230.023] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.026] Sleep (dwMilliseconds=0x5) [0230.068] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.070] Sleep (dwMilliseconds=0x5) [0230.109] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.112] Sleep (dwMilliseconds=0x5) [0230.160] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.163] Sleep (dwMilliseconds=0x5) [0230.220] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.223] Sleep (dwMilliseconds=0x5) [0230.266] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.268] Sleep (dwMilliseconds=0x5) [0230.315] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.317] Sleep (dwMilliseconds=0x5) [0230.359] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.362] Sleep (dwMilliseconds=0x5) [0230.406] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.408] Sleep (dwMilliseconds=0x5) [0230.452] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.453] Sleep (dwMilliseconds=0x5) [0230.500] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.502] Sleep (dwMilliseconds=0x5) [0230.548] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.550] Sleep (dwMilliseconds=0x5) [0230.593] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.595] Sleep (dwMilliseconds=0x5) [0230.640] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.642] Sleep (dwMilliseconds=0x5) [0230.690] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.692] Sleep (dwMilliseconds=0x5) [0230.735] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.737] Sleep (dwMilliseconds=0x5) [0230.783] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.785] Sleep (dwMilliseconds=0x5) [0230.834] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.836] Sleep (dwMilliseconds=0x5) [0230.874] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.876] Sleep (dwMilliseconds=0x5) [0230.921] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.922] Sleep (dwMilliseconds=0x5) [0230.966] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0230.968] Sleep (dwMilliseconds=0x5) [0231.015] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.017] Sleep (dwMilliseconds=0x5) [0231.062] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.063] Sleep (dwMilliseconds=0x5) [0231.109] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.111] Sleep (dwMilliseconds=0x5) [0231.155] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.156] Sleep (dwMilliseconds=0x5) [0231.202] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.204] Sleep (dwMilliseconds=0x5) [0231.249] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.251] Sleep (dwMilliseconds=0x5) [0231.294] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.296] Sleep (dwMilliseconds=0x5) [0231.342] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.344] Sleep (dwMilliseconds=0x5) [0231.388] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.389] Sleep (dwMilliseconds=0x5) [0231.434] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.436] Sleep (dwMilliseconds=0x5) [0231.486] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.489] Sleep (dwMilliseconds=0x5) [0231.529] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.530] Sleep (dwMilliseconds=0x5) [0231.577] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.579] Sleep (dwMilliseconds=0x5) [0231.623] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.625] Sleep (dwMilliseconds=0x5) [0231.670] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.672] Sleep (dwMilliseconds=0x5) [0231.715] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.717] Sleep (dwMilliseconds=0x5) [0231.767] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.769] Sleep (dwMilliseconds=0x5) [0231.820] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.822] Sleep (dwMilliseconds=0x5) [0231.862] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.864] Sleep (dwMilliseconds=0x5) [0231.909] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0231.911] Sleep (dwMilliseconds=0x5) [0231.962] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.003] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.005] Sleep (dwMilliseconds=0x5) [0232.056] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.058] Sleep (dwMilliseconds=0x5) [0232.108] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.113] Sleep (dwMilliseconds=0x5) [0232.155] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.157] Sleep (dwMilliseconds=0x5) [0232.200] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.202] Sleep (dwMilliseconds=0x5) [0232.247] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.249] Sleep (dwMilliseconds=0x5) [0232.296] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.299] Sleep (dwMilliseconds=0x5) [0232.342] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.344] Sleep (dwMilliseconds=0x5) [0232.388] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.390] Sleep (dwMilliseconds=0x5) [0232.434] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.436] Sleep (dwMilliseconds=0x5) [0232.480] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.481] Sleep (dwMilliseconds=0x5) [0232.527] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.529] Sleep (dwMilliseconds=0x5) [0232.573] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.575] Sleep (dwMilliseconds=0x5) [0232.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.624] Sleep (dwMilliseconds=0x5) [0232.668] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.670] Sleep (dwMilliseconds=0x5) [0232.715] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.717] Sleep (dwMilliseconds=0x5) [0232.763] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.765] Sleep (dwMilliseconds=0x5) [0232.809] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.811] Sleep (dwMilliseconds=0x5) [0232.867] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.869] Sleep (dwMilliseconds=0x5) [0232.917] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.919] Sleep (dwMilliseconds=0x5) [0232.965] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0232.966] Sleep (dwMilliseconds=0x5) [0233.012] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.014] Sleep (dwMilliseconds=0x5) [0233.057] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.059] Sleep (dwMilliseconds=0x5) [0233.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.106] Sleep (dwMilliseconds=0x5) [0233.154] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.155] Sleep (dwMilliseconds=0x5) [0233.198] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.199] Sleep (dwMilliseconds=0x5) [0233.246] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.248] Sleep (dwMilliseconds=0x5) [0233.293] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.295] Sleep (dwMilliseconds=0x5) [0233.342] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.343] Sleep (dwMilliseconds=0x5) [0233.386] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.388] Sleep (dwMilliseconds=0x5) [0233.431] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.433] Sleep (dwMilliseconds=0x5) [0233.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.481] Sleep (dwMilliseconds=0x5) [0233.528] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.530] Sleep (dwMilliseconds=0x5) [0233.570] Sleep (dwMilliseconds=0x5) [0233.625] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.628] Sleep (dwMilliseconds=0x5) [0233.668] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.670] Sleep (dwMilliseconds=0x5) [0233.713] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.715] Sleep (dwMilliseconds=0x5) [0233.760] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.762] Sleep (dwMilliseconds=0x5) [0233.807] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.809] Sleep (dwMilliseconds=0x5) [0233.864] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.866] Sleep (dwMilliseconds=0x5) [0233.914] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.916] Sleep (dwMilliseconds=0x5) [0233.965] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0233.967] Sleep (dwMilliseconds=0x5) [0234.010] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.012] Sleep (dwMilliseconds=0x5) [0234.056] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.059] Sleep (dwMilliseconds=0x5) [0234.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.106] Sleep (dwMilliseconds=0x5) [0234.155] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.158] Sleep (dwMilliseconds=0x5) [0234.202] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.204] Sleep (dwMilliseconds=0x5) [0234.246] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.248] Sleep (dwMilliseconds=0x5) [0234.291] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.293] Sleep (dwMilliseconds=0x5) [0234.337] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.339] Sleep (dwMilliseconds=0x5) [0234.385] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.387] Sleep (dwMilliseconds=0x5) [0234.431] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.433] Sleep (dwMilliseconds=0x5) [0234.476] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.477] Sleep (dwMilliseconds=0x5) [0234.524] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.526] Sleep (dwMilliseconds=0x5) [0234.564] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.566] Sleep (dwMilliseconds=0x5) [0234.603] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.605] Sleep (dwMilliseconds=0x5) [0234.656] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.658] Sleep (dwMilliseconds=0x5) [0234.697] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.699] Sleep (dwMilliseconds=0x5) [0234.748] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.750] Sleep (dwMilliseconds=0x5) [0234.790] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.792] Sleep (dwMilliseconds=0x5) [0234.836] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.838] Sleep (dwMilliseconds=0x5) [0234.883] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.884] Sleep (dwMilliseconds=0x5) [0234.929] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.931] Sleep (dwMilliseconds=0x5) [0234.977] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0234.979] Sleep (dwMilliseconds=0x5) [0235.023] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.025] Sleep (dwMilliseconds=0x5) [0235.065] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.068] Sleep (dwMilliseconds=0x5) [0235.124] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.126] Sleep (dwMilliseconds=0x5) [0235.165] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.167] Sleep (dwMilliseconds=0x5) [0235.213] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.215] Sleep (dwMilliseconds=0x5) [0235.259] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.261] Sleep (dwMilliseconds=0x5) [0235.307] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.309] Sleep (dwMilliseconds=0x5) [0235.353] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.355] Sleep (dwMilliseconds=0x5) [0235.402] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.403] Sleep (dwMilliseconds=0x5) [0235.450] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.452] Sleep (dwMilliseconds=0x5) [0235.492] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.494] Sleep (dwMilliseconds=0x5) [0235.538] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.540] Sleep (dwMilliseconds=0x5) [0235.587] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.589] Sleep (dwMilliseconds=0x5) [0235.655] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.720] Sleep (dwMilliseconds=0x5) [0235.775] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.777] Sleep (dwMilliseconds=0x5) [0235.823] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.825] Sleep (dwMilliseconds=0x5) [0235.874] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.877] Sleep (dwMilliseconds=0x5) [0235.917] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.920] Sleep (dwMilliseconds=0x5) [0235.966] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0235.968] Sleep (dwMilliseconds=0x5) [0236.023] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.026] Sleep (dwMilliseconds=0x5) [0236.072] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.074] Sleep (dwMilliseconds=0x5) [0236.120] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.122] Sleep (dwMilliseconds=0x5) [0236.169] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.171] Sleep (dwMilliseconds=0x5) [0236.204] Sleep (dwMilliseconds=0x5) [0236.243] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.245] Sleep (dwMilliseconds=0x5) [0236.291] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.293] Sleep (dwMilliseconds=0x5) [0236.338] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.340] Sleep (dwMilliseconds=0x5) [0236.382] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.384] Sleep (dwMilliseconds=0x5) [0236.429] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.431] Sleep (dwMilliseconds=0x5) [0236.473] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.475] Sleep (dwMilliseconds=0x5) [0236.523] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.524] Sleep (dwMilliseconds=0x5) [0236.569] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.570] Sleep (dwMilliseconds=0x5) [0236.616] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.618] Sleep (dwMilliseconds=0x5) [0236.663] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.665] Sleep (dwMilliseconds=0x5) [0236.710] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.711] Sleep (dwMilliseconds=0x5) [0236.754] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.756] Sleep (dwMilliseconds=0x5) [0236.803] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.805] Sleep (dwMilliseconds=0x5) [0236.848] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.850] Sleep (dwMilliseconds=0x5) [0236.942] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.944] Sleep (dwMilliseconds=0x5) [0236.996] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0236.998] Sleep (dwMilliseconds=0x5) [0237.054] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.056] Sleep (dwMilliseconds=0x5) [0237.101] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.103] Sleep (dwMilliseconds=0x5) [0237.148] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.149] Sleep (dwMilliseconds=0x5) [0237.194] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.197] Sleep (dwMilliseconds=0x5) [0237.240] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.242] Sleep (dwMilliseconds=0x5) [0237.286] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.288] Sleep (dwMilliseconds=0x5) [0237.333] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.335] Sleep (dwMilliseconds=0x5) [0237.380] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.382] Sleep (dwMilliseconds=0x5) [0237.427] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.429] Sleep (dwMilliseconds=0x5) [0237.472] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.474] Sleep (dwMilliseconds=0x5) [0237.520] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.522] Sleep (dwMilliseconds=0x5) [0237.567] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.569] Sleep (dwMilliseconds=0x5) [0237.618] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.620] Sleep (dwMilliseconds=0x5) [0237.665] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.667] Sleep (dwMilliseconds=0x5) [0237.708] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.710] Sleep (dwMilliseconds=0x5) [0237.757] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.759] Sleep (dwMilliseconds=0x5) [0237.801] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.803] Sleep (dwMilliseconds=0x5) [0237.849] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.852] Sleep (dwMilliseconds=0x5) [0237.896] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.898] Sleep (dwMilliseconds=0x5) [0237.943] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.946] Sleep (dwMilliseconds=0x5) [0237.991] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0237.993] Sleep (dwMilliseconds=0x5) [0238.039] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.042] Sleep (dwMilliseconds=0x5) [0238.082] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.084] Sleep (dwMilliseconds=0x5) [0238.144] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.146] Sleep (dwMilliseconds=0x5) [0238.192] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.194] Sleep (dwMilliseconds=0x5) [0238.239] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.241] Sleep (dwMilliseconds=0x5) [0238.287] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.289] Sleep (dwMilliseconds=0x5) [0238.335] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.338] Sleep (dwMilliseconds=0x5) [0238.378] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.380] Sleep (dwMilliseconds=0x5) [0238.428] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.430] Sleep (dwMilliseconds=0x5) [0238.476] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.478] Sleep (dwMilliseconds=0x5) [0238.521] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.523] Sleep (dwMilliseconds=0x5) [0238.569] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.571] Sleep (dwMilliseconds=0x5) [0238.612] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.615] Sleep (dwMilliseconds=0x5) [0238.658] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.660] Sleep (dwMilliseconds=0x5) [0238.710] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.712] Sleep (dwMilliseconds=0x5) [0238.754] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.756] Sleep (dwMilliseconds=0x5) [0238.801] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.804] Sleep (dwMilliseconds=0x5) [0238.847] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.849] Sleep (dwMilliseconds=0x5) [0238.900] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.902] Sleep (dwMilliseconds=0x5) [0238.944] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.947] Sleep (dwMilliseconds=0x5) [0238.991] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0238.994] Sleep (dwMilliseconds=0x5) [0239.038] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.040] Sleep (dwMilliseconds=0x5) [0239.086] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.088] Sleep (dwMilliseconds=0x5) [0239.131] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.133] Sleep (dwMilliseconds=0x5) [0239.174] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.176] Sleep (dwMilliseconds=0x5) [0239.222] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.224] Sleep (dwMilliseconds=0x5) [0239.266] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.268] Sleep (dwMilliseconds=0x5) [0239.316] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.318] Sleep (dwMilliseconds=0x5) [0239.361] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.363] Sleep (dwMilliseconds=0x5) [0239.407] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.410] Sleep (dwMilliseconds=0x5) [0239.454] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.457] Sleep (dwMilliseconds=0x5) [0239.502] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.504] Sleep (dwMilliseconds=0x5) [0239.548] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.550] Sleep (dwMilliseconds=0x5) [0239.595] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.597] Sleep (dwMilliseconds=0x5) [0239.643] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.645] Sleep (dwMilliseconds=0x5) [0239.690] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.692] Sleep (dwMilliseconds=0x5) [0239.738] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.740] Sleep (dwMilliseconds=0x5) [0239.783] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.785] Sleep (dwMilliseconds=0x5) [0239.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.832] Sleep (dwMilliseconds=0x5) [0239.876] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.878] Sleep (dwMilliseconds=0x5) [0239.922] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.924] Sleep (dwMilliseconds=0x5) [0239.972] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0239.974] Sleep (dwMilliseconds=0x5) [0240.019] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.021] Sleep (dwMilliseconds=0x5) [0240.065] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.067] Sleep (dwMilliseconds=0x5) [0240.113] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.116] Sleep (dwMilliseconds=0x5) [0240.157] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.159] Sleep (dwMilliseconds=0x5) [0240.204] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.206] Sleep (dwMilliseconds=0x5) [0240.253] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.255] Sleep (dwMilliseconds=0x5) [0240.311] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.365] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.367] Sleep (dwMilliseconds=0x5) [0240.407] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.409] Sleep (dwMilliseconds=0x5) [0240.456] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.458] Sleep (dwMilliseconds=0x5) [0240.502] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.504] Sleep (dwMilliseconds=0x5) [0240.549] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.551] Sleep (dwMilliseconds=0x5) [0240.597] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.600] Sleep (dwMilliseconds=0x5) [0240.643] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.645] Sleep (dwMilliseconds=0x5) [0240.685] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.687] Sleep (dwMilliseconds=0x5) [0240.736] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.738] Sleep (dwMilliseconds=0x5) [0240.779] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.780] Sleep (dwMilliseconds=0x5) [0240.825] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.827] Sleep (dwMilliseconds=0x5) [0240.872] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.873] Sleep (dwMilliseconds=0x5) [0240.922] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.924] Sleep (dwMilliseconds=0x5) [0240.967] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0240.969] Sleep (dwMilliseconds=0x5) [0241.014] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.016] Sleep (dwMilliseconds=0x5) [0241.063] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.065] Sleep (dwMilliseconds=0x5) [0241.109] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.111] Sleep (dwMilliseconds=0x5) [0241.153] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.156] Sleep (dwMilliseconds=0x5) [0241.202] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.204] Sleep (dwMilliseconds=0x5) [0241.249] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.251] Sleep (dwMilliseconds=0x5) [0241.301] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.303] Sleep (dwMilliseconds=0x5) [0241.348] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.350] Sleep (dwMilliseconds=0x5) [0241.392] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.394] Sleep (dwMilliseconds=0x5) [0241.454] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.456] Sleep (dwMilliseconds=0x5) [0241.499] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.501] Sleep (dwMilliseconds=0x5) [0241.548] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.550] Sleep (dwMilliseconds=0x5) [0241.593] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.595] Sleep (dwMilliseconds=0x5) [0241.638] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.640] Sleep (dwMilliseconds=0x5) [0241.690] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.692] Sleep (dwMilliseconds=0x5) [0241.731] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.732] Sleep (dwMilliseconds=0x5) [0241.779] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.781] Sleep (dwMilliseconds=0x5) [0241.825] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.826] Sleep (dwMilliseconds=0x5) [0241.873] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.875] Sleep (dwMilliseconds=0x5) [0241.919] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.921] Sleep (dwMilliseconds=0x5) [0241.968] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0241.970] Sleep (dwMilliseconds=0x5) [0242.011] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.013] Sleep (dwMilliseconds=0x5) [0242.057] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.059] Sleep (dwMilliseconds=0x5) [0242.112] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.114] Sleep (dwMilliseconds=0x5) [0242.158] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.160] Sleep (dwMilliseconds=0x5) [0242.202] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.204] Sleep (dwMilliseconds=0x5) [0242.248] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.250] Sleep (dwMilliseconds=0x5) [0242.297] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.299] Sleep (dwMilliseconds=0x5) [0242.343] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.346] Sleep (dwMilliseconds=0x5) [0242.389] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.391] Sleep (dwMilliseconds=0x5) [0242.484] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.529] Sleep (dwMilliseconds=0x5) [0242.574] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.576] Sleep (dwMilliseconds=0x5) [0242.621] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.623] Sleep (dwMilliseconds=0x5) [0242.666] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.668] Sleep (dwMilliseconds=0x5) [0242.714] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.715] Sleep (dwMilliseconds=0x5) [0242.767] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.769] Sleep (dwMilliseconds=0x5) [0242.814] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.816] Sleep (dwMilliseconds=0x5) [0242.856] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.859] Sleep (dwMilliseconds=0x5) [0242.906] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.908] Sleep (dwMilliseconds=0x5) [0242.954] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0242.956] Sleep (dwMilliseconds=0x5) [0242.998] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.000] Sleep (dwMilliseconds=0x5) [0243.042] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.045] Sleep (dwMilliseconds=0x5) [0243.090] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.093] Sleep (dwMilliseconds=0x5) [0243.138] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.140] Sleep (dwMilliseconds=0x5) [0243.182] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.184] Sleep (dwMilliseconds=0x5) [0243.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.235] Sleep (dwMilliseconds=0x5) [0243.280] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.282] Sleep (dwMilliseconds=0x5) [0243.331] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.333] Sleep (dwMilliseconds=0x5) [0243.375] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.377] Sleep (dwMilliseconds=0x5) [0243.416] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.418] Sleep (dwMilliseconds=0x5) [0243.462] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.464] Sleep (dwMilliseconds=0x5) [0243.513] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.515] Sleep (dwMilliseconds=0x5) [0243.556] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.558] Sleep (dwMilliseconds=0x5) [0243.604] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.606] Sleep (dwMilliseconds=0x5) [0243.649] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.651] Sleep (dwMilliseconds=0x5) [0243.701] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.703] Sleep (dwMilliseconds=0x5) [0243.744] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.746] Sleep (dwMilliseconds=0x5) [0243.789] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.791] Sleep (dwMilliseconds=0x5) [0243.838] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.840] Sleep (dwMilliseconds=0x5) [0243.883] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.885] Sleep (dwMilliseconds=0x5) [0243.932] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.978] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0243.979] Sleep (dwMilliseconds=0x5) [0244.025] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.028] Sleep (dwMilliseconds=0x5) [0244.071] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.073] Sleep (dwMilliseconds=0x5) [0244.120] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.122] Sleep (dwMilliseconds=0x5) [0244.165] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.167] Sleep (dwMilliseconds=0x5) [0244.212] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.214] Sleep (dwMilliseconds=0x5) [0244.258] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.260] Sleep (dwMilliseconds=0x5) [0244.309] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.313] Sleep (dwMilliseconds=0x5) [0244.355] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.357] Sleep (dwMilliseconds=0x5) [0244.403] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.408] Sleep (dwMilliseconds=0x5) [0244.464] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.467] Sleep (dwMilliseconds=0x5) [0244.508] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.511] Sleep (dwMilliseconds=0x5) [0244.558] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.560] Sleep (dwMilliseconds=0x5) [0244.600] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.602] Sleep (dwMilliseconds=0x5) [0244.649] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.650] Sleep (dwMilliseconds=0x5) [0244.700] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.702] Sleep (dwMilliseconds=0x5) [0244.742] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.744] Sleep (dwMilliseconds=0x5) [0244.787] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.789] Sleep (dwMilliseconds=0x5) [0244.835] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.837] Sleep (dwMilliseconds=0x5) [0244.884] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.886] Sleep (dwMilliseconds=0x5) [0244.932] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.934] Sleep (dwMilliseconds=0x5) [0244.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0244.976] Sleep (dwMilliseconds=0x5) [0245.024] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.027] Sleep (dwMilliseconds=0x5) [0245.070] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.072] Sleep (dwMilliseconds=0x5) [0245.118] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.120] Sleep (dwMilliseconds=0x5) [0245.163] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.165] Sleep (dwMilliseconds=0x5) [0245.209] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.210] Sleep (dwMilliseconds=0x5) [0245.258] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.259] Sleep (dwMilliseconds=0x5) [0245.302] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.304] Sleep (dwMilliseconds=0x5) [0245.352] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.354] Sleep (dwMilliseconds=0x5) [0245.398] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.400] Sleep (dwMilliseconds=0x5) [0245.443] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.444] Sleep (dwMilliseconds=0x5) [0245.489] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.491] Sleep (dwMilliseconds=0x5) [0245.538] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.540] Sleep (dwMilliseconds=0x5) [0245.584] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.586] Sleep (dwMilliseconds=0x5) [0245.633] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.636] Sleep (dwMilliseconds=0x5) [0245.678] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.680] Sleep (dwMilliseconds=0x5) [0245.730] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.732] Sleep (dwMilliseconds=0x5) [0245.772] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.773] Sleep (dwMilliseconds=0x5) [0245.820] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.821] Sleep (dwMilliseconds=0x5) [0245.864] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.866] Sleep (dwMilliseconds=0x5) [0245.911] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.913] Sleep (dwMilliseconds=0x5) [0245.958] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0245.960] Sleep (dwMilliseconds=0x5) [0246.008] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.009] Sleep (dwMilliseconds=0x5) [0246.052] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.054] Sleep (dwMilliseconds=0x5) [0246.098] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.100] Sleep (dwMilliseconds=0x5) [0246.146] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.148] Sleep (dwMilliseconds=0x5) [0246.195] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.196] Sleep (dwMilliseconds=0x5) [0246.241] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.243] Sleep (dwMilliseconds=0x5) [0246.290] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.292] Sleep (dwMilliseconds=0x5) [0246.332] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.386] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.388] Sleep (dwMilliseconds=0x5) [0246.435] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.438] Sleep (dwMilliseconds=0x5) [0246.496] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.498] Sleep (dwMilliseconds=0x5) [0246.553] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.556] Sleep (dwMilliseconds=0x5) [0246.598] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.600] Sleep (dwMilliseconds=0x5) [0246.647] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.649] Sleep (dwMilliseconds=0x5) [0246.697] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.701] Sleep (dwMilliseconds=0x5) [0246.744] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.747] Sleep (dwMilliseconds=0x5) [0246.780] Sleep (dwMilliseconds=0x5) [0246.820] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.822] Sleep (dwMilliseconds=0x5) [0246.863] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.865] Sleep (dwMilliseconds=0x5) [0246.909] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.911] Sleep (dwMilliseconds=0x5) [0246.959] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0246.962] Sleep (dwMilliseconds=0x5) [0247.004] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.006] Sleep (dwMilliseconds=0x5) [0247.051] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.053] Sleep (dwMilliseconds=0x5) [0247.099] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.101] Sleep (dwMilliseconds=0x5) [0247.145] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.146] Sleep (dwMilliseconds=0x5) [0247.192] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.194] Sleep (dwMilliseconds=0x5) [0247.240] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.242] Sleep (dwMilliseconds=0x5) [0247.285] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.287] Sleep (dwMilliseconds=0x5) [0247.332] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.333] Sleep (dwMilliseconds=0x5) [0247.379] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.381] Sleep (dwMilliseconds=0x5) [0247.424] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.426] Sleep (dwMilliseconds=0x5) [0247.473] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.475] Sleep (dwMilliseconds=0x5) [0247.520] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.522] Sleep (dwMilliseconds=0x5) [0247.566] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.568] Sleep (dwMilliseconds=0x5) [0247.614] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.615] Sleep (dwMilliseconds=0x5) [0247.660] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.661] Sleep (dwMilliseconds=0x5) [0247.704] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.706] Sleep (dwMilliseconds=0x5) [0247.754] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.756] Sleep (dwMilliseconds=0x5) [0247.798] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.800] Sleep (dwMilliseconds=0x5) [0247.846] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.848] Sleep (dwMilliseconds=0x5) [0247.895] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.897] Sleep (dwMilliseconds=0x5) [0247.904] Sleep (dwMilliseconds=0x5) [0247.925] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.927] Sleep (dwMilliseconds=0x5) [0247.937] Sleep (dwMilliseconds=0x5) [0247.959] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.961] Sleep (dwMilliseconds=0x5) [0247.968] Sleep (dwMilliseconds=0x5) [0247.985] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0247.987] Sleep (dwMilliseconds=0x5) [0247.998] Sleep (dwMilliseconds=0x5) [0248.017] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.019] Sleep (dwMilliseconds=0x5) [0248.029] Sleep (dwMilliseconds=0x5) [0248.048] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.049] Sleep (dwMilliseconds=0x5) [0248.082] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.084] Sleep (dwMilliseconds=0x5) [0248.127] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.129] Sleep (dwMilliseconds=0x5) [0248.174] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.176] Sleep (dwMilliseconds=0x5) [0248.222] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.223] Sleep (dwMilliseconds=0x5) [0248.269] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.270] Sleep (dwMilliseconds=0x5) [0248.313] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.315] Sleep (dwMilliseconds=0x5) [0248.360] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.362] Sleep (dwMilliseconds=0x5) [0248.408] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.410] Sleep (dwMilliseconds=0x5) [0248.456] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.458] Sleep (dwMilliseconds=0x5) [0248.506] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.508] Sleep (dwMilliseconds=0x5) [0248.553] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.555] Sleep (dwMilliseconds=0x5) [0248.595] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.597] Sleep (dwMilliseconds=0x5) [0248.644] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.646] Sleep (dwMilliseconds=0x5) [0248.689] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.691] Sleep (dwMilliseconds=0x5) [0248.735] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.737] Sleep (dwMilliseconds=0x5) [0248.784] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.786] Sleep (dwMilliseconds=0x5) [0248.828] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.830] Sleep (dwMilliseconds=0x5) [0248.878] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.880] Sleep (dwMilliseconds=0x5) [0248.922] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.924] Sleep (dwMilliseconds=0x5) [0248.972] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0248.974] Sleep (dwMilliseconds=0x5) [0249.017] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.018] Sleep (dwMilliseconds=0x5) [0249.063] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.065] Sleep (dwMilliseconds=0x5) [0249.111] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.113] Sleep (dwMilliseconds=0x5) [0249.159] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.161] Sleep (dwMilliseconds=0x5) [0249.202] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.204] Sleep (dwMilliseconds=0x5) [0249.250] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.252] Sleep (dwMilliseconds=0x5) [0249.298] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.300] Sleep (dwMilliseconds=0x5) [0249.348] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.349] Sleep (dwMilliseconds=0x5) [0249.391] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.393] Sleep (dwMilliseconds=0x5) [0249.439] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.440] Sleep (dwMilliseconds=0x5) [0249.487] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.489] Sleep (dwMilliseconds=0x5) [0249.532] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.534] Sleep (dwMilliseconds=0x5) [0249.578] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.579] Sleep (dwMilliseconds=0x5) [0249.626] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.628] Sleep (dwMilliseconds=0x5) [0249.678] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.680] Sleep (dwMilliseconds=0x5) [0249.721] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.723] Sleep (dwMilliseconds=0x5) [0249.766] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.768] Sleep (dwMilliseconds=0x5) [0249.814] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.816] Sleep (dwMilliseconds=0x5) [0249.860] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.862] Sleep (dwMilliseconds=0x5) [0249.906] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.908] Sleep (dwMilliseconds=0x5) [0249.958] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0249.961] Sleep (dwMilliseconds=0x5) [0250.003] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.005] Sleep (dwMilliseconds=0x5) [0250.050] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.052] Sleep (dwMilliseconds=0x5) [0250.093] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.094] Sleep (dwMilliseconds=0x5) [0250.138] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.140] Sleep (dwMilliseconds=0x5) [0250.186] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.188] Sleep (dwMilliseconds=0x5) [0250.233] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.235] Sleep (dwMilliseconds=0x5) [0250.280] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.282] Sleep (dwMilliseconds=0x5) [0250.333] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.335] Sleep (dwMilliseconds=0x5) [0250.372] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.374] Sleep (dwMilliseconds=0x5) [0250.422] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.424] Sleep (dwMilliseconds=0x5) [0250.465] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.467] Sleep (dwMilliseconds=0x5) [0250.515] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.517] Sleep (dwMilliseconds=0x5) [0250.561] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.562] Sleep (dwMilliseconds=0x5) [0250.613] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.616] Sleep (dwMilliseconds=0x5) [0250.664] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.666] Sleep (dwMilliseconds=0x5) [0250.708] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.710] Sleep (dwMilliseconds=0x5) [0250.749] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.751] Sleep (dwMilliseconds=0x5) [0250.799] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.802] Sleep (dwMilliseconds=0x5) [0250.837] Sleep (dwMilliseconds=0x5) [0250.874] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.875] Sleep (dwMilliseconds=0x5) [0250.920] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.922] Sleep (dwMilliseconds=0x5) [0250.967] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0250.969] Sleep (dwMilliseconds=0x5) [0251.015] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.016] Sleep (dwMilliseconds=0x5) [0251.059] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.061] Sleep (dwMilliseconds=0x5) [0251.112] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.115] Sleep (dwMilliseconds=0x5) [0251.157] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.160] Sleep (dwMilliseconds=0x5) [0251.208] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.210] Sleep (dwMilliseconds=0x5) [0251.250] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.252] Sleep (dwMilliseconds=0x5) [0251.295] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.297] Sleep (dwMilliseconds=0x5) [0251.341] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.343] Sleep (dwMilliseconds=0x5) [0251.387] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.389] Sleep (dwMilliseconds=0x5) [0251.433] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.435] Sleep (dwMilliseconds=0x5) [0251.483] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.485] Sleep (dwMilliseconds=0x5) [0251.529] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.531] Sleep (dwMilliseconds=0x5) [0251.573] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.575] Sleep (dwMilliseconds=0x5) [0251.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.625] Sleep (dwMilliseconds=0x5) [0251.669] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.671] Sleep (dwMilliseconds=0x5) [0251.732] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.734] Sleep (dwMilliseconds=0x5) [0251.777] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.778] Sleep (dwMilliseconds=0x5) [0251.824] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.826] Sleep (dwMilliseconds=0x5) [0251.871] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.873] Sleep (dwMilliseconds=0x5) [0251.919] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.920] Sleep (dwMilliseconds=0x5) [0251.969] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0251.970] Sleep (dwMilliseconds=0x5) [0252.010] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.012] Sleep (dwMilliseconds=0x5) [0252.059] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.061] Sleep (dwMilliseconds=0x5) [0252.106] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.108] Sleep (dwMilliseconds=0x5) [0252.151] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.153] Sleep (dwMilliseconds=0x5) [0252.201] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.203] Sleep (dwMilliseconds=0x5) [0252.244] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.246] Sleep (dwMilliseconds=0x5) [0252.293] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.295] Sleep (dwMilliseconds=0x5) [0252.338] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.340] Sleep (dwMilliseconds=0x5) [0252.385] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.386] Sleep (dwMilliseconds=0x5) [0252.434] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.436] Sleep (dwMilliseconds=0x5) [0252.480] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.481] Sleep (dwMilliseconds=0x5) [0252.525] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.527] Sleep (dwMilliseconds=0x5) [0252.573] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.575] Sleep (dwMilliseconds=0x5) [0252.620] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.622] Sleep (dwMilliseconds=0x5) [0252.668] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.670] Sleep (dwMilliseconds=0x5) [0252.712] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.714] Sleep (dwMilliseconds=0x5) [0252.762] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.764] Sleep (dwMilliseconds=0x5) [0252.809] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.811] Sleep (dwMilliseconds=0x5) [0252.856] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.857] Sleep (dwMilliseconds=0x5) [0252.902] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.904] Sleep (dwMilliseconds=0x5) [0252.948] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.950] Sleep (dwMilliseconds=0x5) [0252.997] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0252.999] Sleep (dwMilliseconds=0x5) [0253.041] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.042] Sleep (dwMilliseconds=0x5) [0253.089] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.090] Sleep (dwMilliseconds=0x5) [0253.135] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.137] Sleep (dwMilliseconds=0x5) [0253.182] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.184] Sleep (dwMilliseconds=0x5) [0253.229] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.231] Sleep (dwMilliseconds=0x5) [0253.273] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.275] Sleep (dwMilliseconds=0x5) [0253.321] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.322] Sleep (dwMilliseconds=0x5) [0253.369] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.370] Sleep (dwMilliseconds=0x5) [0253.415] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.417] Sleep (dwMilliseconds=0x5) [0253.461] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.463] Sleep (dwMilliseconds=0x5) [0253.510] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.512] Sleep (dwMilliseconds=0x5) [0253.557] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.559] Sleep (dwMilliseconds=0x5) [0253.604] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.606] Sleep (dwMilliseconds=0x5) [0253.651] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.653] Sleep (dwMilliseconds=0x5) [0253.703] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.705] Sleep (dwMilliseconds=0x5) [0253.748] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.750] Sleep (dwMilliseconds=0x5) [0253.814] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.816] Sleep (dwMilliseconds=0x5) [0253.859] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.862] Sleep (dwMilliseconds=0x5) [0253.908] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.911] Sleep (dwMilliseconds=0x5) [0253.963] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0253.964] Sleep (dwMilliseconds=0x5) [0254.007] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.009] Sleep (dwMilliseconds=0x5) [0254.056] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.058] Sleep (dwMilliseconds=0x5) [0254.100] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.102] Sleep (dwMilliseconds=0x5) [0254.148] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.151] Sleep (dwMilliseconds=0x5) [0254.194] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.196] Sleep (dwMilliseconds=0x5) [0254.243] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.245] Sleep (dwMilliseconds=0x5) [0254.290] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.292] Sleep (dwMilliseconds=0x5) [0254.336] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.339] Sleep (dwMilliseconds=0x5) [0254.386] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.388] Sleep (dwMilliseconds=0x5) [0254.431] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.433] Sleep (dwMilliseconds=0x5) [0254.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.481] Sleep (dwMilliseconds=0x5) [0254.528] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.531] Sleep (dwMilliseconds=0x5) [0254.574] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.575] Sleep (dwMilliseconds=0x5) [0254.617] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.619] Sleep (dwMilliseconds=0x5) [0254.669] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.672] Sleep (dwMilliseconds=0x5) [0254.730] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.732] Sleep (dwMilliseconds=0x5) [0254.785] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.789] Sleep (dwMilliseconds=0x5) [0254.843] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.845] Sleep (dwMilliseconds=0x5) [0254.887] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.889] Sleep (dwMilliseconds=0x5) [0254.927] Sleep (dwMilliseconds=0x5) [0254.966] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0254.969] Sleep (dwMilliseconds=0x5) [0255.011] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.013] Sleep (dwMilliseconds=0x5) [0255.062] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.064] Sleep (dwMilliseconds=0x5) [0255.099] Sleep (dwMilliseconds=0x5) [0255.139] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.142] Sleep (dwMilliseconds=0x5) [0255.183] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.186] Sleep (dwMilliseconds=0x5) [0255.234] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.237] Sleep (dwMilliseconds=0x5) [0255.270] Sleep (dwMilliseconds=0x5) [0255.309] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.312] Sleep (dwMilliseconds=0x5) [0255.355] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.357] Sleep (dwMilliseconds=0x5) [0255.403] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.406] Sleep (dwMilliseconds=0x5) [0255.440] Sleep (dwMilliseconds=0x5) [0255.480] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.482] Sleep (dwMilliseconds=0x5) [0255.521] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.523] Sleep (dwMilliseconds=0x5) [0255.568] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.570] Sleep (dwMilliseconds=0x5) [0255.616] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.618] Sleep (dwMilliseconds=0x5) [0255.662] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.664] Sleep (dwMilliseconds=0x5) [0255.713] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.715] Sleep (dwMilliseconds=0x5) [0255.757] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.759] Sleep (dwMilliseconds=0x5) [0255.822] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.825] Sleep (dwMilliseconds=0x5) [0255.872] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.875] Sleep (dwMilliseconds=0x5) [0255.928] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.931] Sleep (dwMilliseconds=0x5) [0255.978] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0255.980] Sleep (dwMilliseconds=0x5) [0256.023] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.025] Sleep (dwMilliseconds=0x5) [0256.089] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.091] Sleep (dwMilliseconds=0x5) [0256.136] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.138] Sleep (dwMilliseconds=0x5) [0256.182] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.184] Sleep (dwMilliseconds=0x5) [0256.225] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.228] Sleep (dwMilliseconds=0x5) [0256.271] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.273] Sleep (dwMilliseconds=0x5) [0256.320] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.322] Sleep (dwMilliseconds=0x5) [0256.365] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.367] Sleep (dwMilliseconds=0x5) [0256.413] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.415] Sleep (dwMilliseconds=0x5) [0256.460] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.462] Sleep (dwMilliseconds=0x5) [0256.507] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.509] Sleep (dwMilliseconds=0x5) [0256.559] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.561] Sleep (dwMilliseconds=0x5) [0256.596] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.598] Sleep (dwMilliseconds=0x5) [0256.639] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.643] Sleep (dwMilliseconds=0x5) [0256.694] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.696] Sleep (dwMilliseconds=0x5) [0256.740] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.742] Sleep (dwMilliseconds=0x5) [0256.784] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.785] Sleep (dwMilliseconds=0x5) [0256.834] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.836] Sleep (dwMilliseconds=0x5) [0256.880] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.881] Sleep (dwMilliseconds=0x5) [0256.926] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.928] Sleep (dwMilliseconds=0x5) [0256.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0256.976] Sleep (dwMilliseconds=0x5) [0257.018] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.020] Sleep (dwMilliseconds=0x5) [0257.067] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.069] Sleep (dwMilliseconds=0x5) [0257.112] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.114] Sleep (dwMilliseconds=0x5) [0257.160] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.161] Sleep (dwMilliseconds=0x5) [0257.206] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.209] Sleep (dwMilliseconds=0x5) [0257.252] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.254] Sleep (dwMilliseconds=0x5) [0257.300] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.302] Sleep (dwMilliseconds=0x5) [0257.347] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.349] Sleep (dwMilliseconds=0x5) [0257.394] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.396] Sleep (dwMilliseconds=0x5) [0257.439] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.441] Sleep (dwMilliseconds=0x5) [0257.486] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.488] Sleep (dwMilliseconds=0x5) [0257.534] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.536] Sleep (dwMilliseconds=0x5) [0257.581] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.583] Sleep (dwMilliseconds=0x5) [0257.628] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.632] Sleep (dwMilliseconds=0x5) [0257.674] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.676] Sleep (dwMilliseconds=0x5) [0257.721] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.724] Sleep (dwMilliseconds=0x5) [0257.773] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.775] Sleep (dwMilliseconds=0x5) [0257.817] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.820] Sleep (dwMilliseconds=0x5) [0257.876] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.878] Sleep (dwMilliseconds=0x5) [0257.923] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.973] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0257.975] Sleep (dwMilliseconds=0x5) [0258.018] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.020] Sleep (dwMilliseconds=0x5) [0258.064] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.066] Sleep (dwMilliseconds=0x5) [0258.113] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.115] Sleep (dwMilliseconds=0x5) [0258.157] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.160] Sleep (dwMilliseconds=0x5) [0258.206] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.207] Sleep (dwMilliseconds=0x5) [0258.250] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.252] Sleep (dwMilliseconds=0x5) [0258.297] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.298] Sleep (dwMilliseconds=0x5) [0258.346] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.349] Sleep (dwMilliseconds=0x5) [0258.390] Sleep (dwMilliseconds=0x5) [0258.445] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.448] Sleep (dwMilliseconds=0x5) [0258.486] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.488] Sleep (dwMilliseconds=0x5) [0258.531] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.533] Sleep (dwMilliseconds=0x5) [0258.580] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.582] Sleep (dwMilliseconds=0x5) [0258.627] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.629] Sleep (dwMilliseconds=0x5) [0258.672] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.673] Sleep (dwMilliseconds=0x5) [0258.719] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.721] Sleep (dwMilliseconds=0x5) [0258.769] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.772] Sleep (dwMilliseconds=0x5) [0258.812] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.814] Sleep (dwMilliseconds=0x5) [0258.861] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.863] Sleep (dwMilliseconds=0x5) [0258.910] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.912] Sleep (dwMilliseconds=0x5) [0258.952] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0258.954] Sleep (dwMilliseconds=0x5) [0259.001] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.002] Sleep (dwMilliseconds=0x5) [0259.049] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.095] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.097] Sleep (dwMilliseconds=0x5) [0259.140] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.143] Sleep (dwMilliseconds=0x5) [0259.188] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.190] Sleep (dwMilliseconds=0x5) [0259.234] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.236] Sleep (dwMilliseconds=0x5) [0259.282] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.284] Sleep (dwMilliseconds=0x5) [0259.329] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.331] Sleep (dwMilliseconds=0x5) [0259.379] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.382] Sleep (dwMilliseconds=0x5) [0259.425] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.427] Sleep (dwMilliseconds=0x5) [0259.469] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.471] Sleep (dwMilliseconds=0x5) [0259.517] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.519] Sleep (dwMilliseconds=0x5) [0259.577] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.579] Sleep (dwMilliseconds=0x5) [0259.624] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.626] Sleep (dwMilliseconds=0x5) [0259.673] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.675] Sleep (dwMilliseconds=0x5) [0259.719] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.721] Sleep (dwMilliseconds=0x5) [0259.764] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.766] Sleep (dwMilliseconds=0x5) [0259.811] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.813] Sleep (dwMilliseconds=0x5) [0259.857] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.859] Sleep (dwMilliseconds=0x5) [0259.907] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.910] Sleep (dwMilliseconds=0x5) [0259.957] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0259.959] Sleep (dwMilliseconds=0x5) [0259.998] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.000] Sleep (dwMilliseconds=0x5) [0260.047] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.050] Sleep (dwMilliseconds=0x5) [0260.093] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.095] Sleep (dwMilliseconds=0x5) [0260.139] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.140] Sleep (dwMilliseconds=0x5) [0260.185] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.186] Sleep (dwMilliseconds=0x5) [0260.234] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.236] Sleep (dwMilliseconds=0x5) [0260.282] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.283] Sleep (dwMilliseconds=0x5) [0260.327] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.328] Sleep (dwMilliseconds=0x5) [0260.372] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.373] Sleep (dwMilliseconds=0x5) [0260.419] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.421] Sleep (dwMilliseconds=0x5) [0260.468] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.470] Sleep (dwMilliseconds=0x5) [0260.521] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.523] Sleep (dwMilliseconds=0x5) [0260.580] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.583] Sleep (dwMilliseconds=0x5) [0260.629] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.631] Sleep (dwMilliseconds=0x5) [0260.673] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.675] Sleep (dwMilliseconds=0x5) [0260.723] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.725] Sleep (dwMilliseconds=0x5) [0260.764] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.766] Sleep (dwMilliseconds=0x5) [0260.810] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.811] Sleep (dwMilliseconds=0x5) [0260.855] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.857] Sleep (dwMilliseconds=0x5) [0260.905] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.906] Sleep (dwMilliseconds=0x5) [0260.950] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0260.952] Sleep (dwMilliseconds=0x5) [0261.004] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.006] Sleep (dwMilliseconds=0x5) [0261.049] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.096] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.098] Sleep (dwMilliseconds=0x5) [0261.143] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.145] Sleep (dwMilliseconds=0x5) [0261.189] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.191] Sleep (dwMilliseconds=0x5) [0261.234] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.236] Sleep (dwMilliseconds=0x5) [0261.281] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.283] Sleep (dwMilliseconds=0x5) [0261.327] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.329] Sleep (dwMilliseconds=0x5) [0261.378] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.381] Sleep (dwMilliseconds=0x5) [0261.420] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.422] Sleep (dwMilliseconds=0x5) [0261.465] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.467] Sleep (dwMilliseconds=0x5) [0261.517] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.519] Sleep (dwMilliseconds=0x5) [0261.563] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.565] Sleep (dwMilliseconds=0x5) [0261.606] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.608] Sleep (dwMilliseconds=0x5) [0261.654] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.655] Sleep (dwMilliseconds=0x5) [0261.698] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.700] Sleep (dwMilliseconds=0x5) [0261.747] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.749] Sleep (dwMilliseconds=0x5) [0261.791] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.793] Sleep (dwMilliseconds=0x5) [0261.840] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.842] Sleep (dwMilliseconds=0x5) [0261.888] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0261.892] Sleep (dwMilliseconds=0x5) [0261.962] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.013] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.015] Sleep (dwMilliseconds=0x5) [0262.060] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.062] Sleep (dwMilliseconds=0x5) [0262.116] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.119] Sleep (dwMilliseconds=0x5) [0262.156] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.158] Sleep (dwMilliseconds=0x5) [0262.204] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.206] Sleep (dwMilliseconds=0x5) [0262.250] Sleep (dwMilliseconds=0x5) [0262.295] Sleep (dwMilliseconds=0x5) [0262.338] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.340] Sleep (dwMilliseconds=0x5) [0262.387] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.389] Sleep (dwMilliseconds=0x5) [0262.434] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.437] Sleep (dwMilliseconds=0x5) [0262.484] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.487] Sleep (dwMilliseconds=0x5) [0262.529] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.532] Sleep (dwMilliseconds=0x5) [0262.573] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.575] Sleep (dwMilliseconds=0x5) [0262.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.625] Sleep (dwMilliseconds=0x5) [0262.673] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.675] Sleep (dwMilliseconds=0x5) [0262.717] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.719] Sleep (dwMilliseconds=0x5) [0262.762] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.764] Sleep (dwMilliseconds=0x5) [0262.807] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.810] Sleep (dwMilliseconds=0x5) [0262.858] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.860] Sleep (dwMilliseconds=0x5) [0262.907] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.910] Sleep (dwMilliseconds=0x5) [0262.950] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0262.961] Sleep (dwMilliseconds=0x5) [0263.014] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.016] Sleep (dwMilliseconds=0x5) [0263.059] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.062] Sleep (dwMilliseconds=0x5) [0263.103] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.105] Sleep (dwMilliseconds=0x5) [0263.154] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.155] Sleep (dwMilliseconds=0x5) [0263.205] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.206] Sleep (dwMilliseconds=0x5) [0263.242] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.244] Sleep (dwMilliseconds=0x5) [0263.290] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.292] Sleep (dwMilliseconds=0x5) [0263.339] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.341] Sleep (dwMilliseconds=0x5) [0263.385] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.387] Sleep (dwMilliseconds=0x5) [0263.435] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.437] Sleep (dwMilliseconds=0x5) [0263.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.481] Sleep (dwMilliseconds=0x5) [0263.528] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.531] Sleep (dwMilliseconds=0x5) [0263.573] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.575] Sleep (dwMilliseconds=0x5) [0263.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.624] Sleep (dwMilliseconds=0x5) [0263.666] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.669] Sleep (dwMilliseconds=0x5) [0263.712] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.714] Sleep (dwMilliseconds=0x5) [0263.761] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.763] Sleep (dwMilliseconds=0x5) [0263.820] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.823] Sleep (dwMilliseconds=0x5) [0263.873] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.875] Sleep (dwMilliseconds=0x5) [0263.920] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.923] Sleep (dwMilliseconds=0x5) [0263.965] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0263.967] Sleep (dwMilliseconds=0x5) [0264.020] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.022] Sleep (dwMilliseconds=0x5) [0264.077] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.079] Sleep (dwMilliseconds=0x5) [0264.136] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.138] Sleep (dwMilliseconds=0x5) [0264.182] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.185] Sleep (dwMilliseconds=0x5) [0264.227] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.275] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.277] Sleep (dwMilliseconds=0x5) [0264.321] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.322] Sleep (dwMilliseconds=0x5) [0264.367] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.369] Sleep (dwMilliseconds=0x5) [0264.414] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.416] Sleep (dwMilliseconds=0x5) [0264.461] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.463] Sleep (dwMilliseconds=0x5) [0264.511] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.513] Sleep (dwMilliseconds=0x5) [0264.553] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.555] Sleep (dwMilliseconds=0x5) [0264.609] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.614] Sleep (dwMilliseconds=0x5) [0264.653] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.655] Sleep (dwMilliseconds=0x5) [0264.696] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.697] Sleep (dwMilliseconds=0x5) [0264.741] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.743] Sleep (dwMilliseconds=0x5) [0264.803] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.807] Sleep (dwMilliseconds=0x5) [0264.850] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.852] Sleep (dwMilliseconds=0x5) [0264.896] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.898] Sleep (dwMilliseconds=0x5) [0264.945] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.947] Sleep (dwMilliseconds=0x5) [0264.991] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0264.993] Sleep (dwMilliseconds=0x5) [0265.054] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.056] Sleep (dwMilliseconds=0x5) [0265.105] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.112] Sleep (dwMilliseconds=0x5) [0265.167] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.170] Sleep (dwMilliseconds=0x5) [0265.210] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.262] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.264] Sleep (dwMilliseconds=0x5) [0265.303] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.306] Sleep (dwMilliseconds=0x5) [0265.354] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.356] Sleep (dwMilliseconds=0x5) [0265.399] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.401] Sleep (dwMilliseconds=0x5) [0265.444] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.445] Sleep (dwMilliseconds=0x5) [0265.490] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.492] Sleep (dwMilliseconds=0x5) [0265.537] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.539] Sleep (dwMilliseconds=0x5) [0265.584] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.586] Sleep (dwMilliseconds=0x5) [0265.631] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.632] Sleep (dwMilliseconds=0x5) [0265.678] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.680] Sleep (dwMilliseconds=0x5) [0265.722] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.724] Sleep (dwMilliseconds=0x5) [0265.774] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.776] Sleep (dwMilliseconds=0x5) [0265.817] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.819] Sleep (dwMilliseconds=0x5) [0265.865] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.867] Sleep (dwMilliseconds=0x5) [0265.912] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.914] Sleep (dwMilliseconds=0x5) [0265.957] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0265.959] Sleep (dwMilliseconds=0x5) [0266.005] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.007] Sleep (dwMilliseconds=0x5) [0266.050] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.059] Sleep (dwMilliseconds=0x5) [0266.099] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.101] Sleep (dwMilliseconds=0x5) [0266.145] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.147] Sleep (dwMilliseconds=0x5) [0266.180] Sleep (dwMilliseconds=0x5) [0266.239] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.290] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.292] Sleep (dwMilliseconds=0x5) [0266.338] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.340] Sleep (dwMilliseconds=0x5) [0266.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.379] Sleep (dwMilliseconds=0x5) [0266.426] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.428] Sleep (dwMilliseconds=0x5) [0266.474] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.476] Sleep (dwMilliseconds=0x5) [0266.520] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.523] Sleep (dwMilliseconds=0x5) [0266.566] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.568] Sleep (dwMilliseconds=0x5) [0266.613] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.616] Sleep (dwMilliseconds=0x5) [0266.661] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.663] Sleep (dwMilliseconds=0x5) [0266.711] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.713] Sleep (dwMilliseconds=0x5) [0266.753] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.755] Sleep (dwMilliseconds=0x5) [0266.801] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.803] Sleep (dwMilliseconds=0x5) [0266.845] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.847] Sleep (dwMilliseconds=0x5) [0266.894] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.896] Sleep (dwMilliseconds=0x5) [0266.940] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.941] Sleep (dwMilliseconds=0x5) [0266.990] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0266.992] Sleep (dwMilliseconds=0x5) [0267.035] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.037] Sleep (dwMilliseconds=0x5) [0267.084] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.086] Sleep (dwMilliseconds=0x5) [0267.143] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.145] Sleep (dwMilliseconds=0x5) [0267.190] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.192] Sleep (dwMilliseconds=0x5) [0267.238] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.240] Sleep (dwMilliseconds=0x5) [0267.286] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.288] Sleep (dwMilliseconds=0x5) [0267.332] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.334] Sleep (dwMilliseconds=0x5) [0267.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.379] Sleep (dwMilliseconds=0x5) [0267.434] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.436] Sleep (dwMilliseconds=0x5) [0267.494] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.496] Sleep (dwMilliseconds=0x5) [0267.539] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.542] Sleep (dwMilliseconds=0x5) [0267.584] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.586] Sleep (dwMilliseconds=0x5) [0267.629] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.631] Sleep (dwMilliseconds=0x5) [0267.677] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.680] Sleep (dwMilliseconds=0x5) [0267.720] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.722] Sleep (dwMilliseconds=0x5) [0267.769] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.771] Sleep (dwMilliseconds=0x5) [0267.814] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.816] Sleep (dwMilliseconds=0x5) [0267.863] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.865] Sleep (dwMilliseconds=0x5) [0267.908] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.910] Sleep (dwMilliseconds=0x5) [0267.958] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0267.960] Sleep (dwMilliseconds=0x5) [0268.001] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.003] Sleep (dwMilliseconds=0x5) [0268.049] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.051] Sleep (dwMilliseconds=0x5) [0268.102] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.104] Sleep (dwMilliseconds=0x5) [0268.160] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.163] Sleep (dwMilliseconds=0x5) [0268.208] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.210] Sleep (dwMilliseconds=0x5) [0268.256] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.258] Sleep (dwMilliseconds=0x5) [0268.298] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.301] Sleep (dwMilliseconds=0x5) [0268.346] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.348] Sleep (dwMilliseconds=0x5) [0268.396] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.398] Sleep (dwMilliseconds=0x5) [0268.439] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.441] Sleep (dwMilliseconds=0x5) [0268.488] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.490] Sleep (dwMilliseconds=0x5) [0268.536] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.539] Sleep (dwMilliseconds=0x5) [0268.579] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.581] Sleep (dwMilliseconds=0x5) [0268.627] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.629] Sleep (dwMilliseconds=0x5) [0268.674] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.676] Sleep (dwMilliseconds=0x5) [0268.723] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.725] Sleep (dwMilliseconds=0x5) [0268.764] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.768] Sleep (dwMilliseconds=0x5) [0268.812] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.814] Sleep (dwMilliseconds=0x5) [0268.858] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.860] Sleep (dwMilliseconds=0x5) [0268.906] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.908] Sleep (dwMilliseconds=0x5) [0268.953] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0268.955] Sleep (dwMilliseconds=0x5) [0269.007] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.009] Sleep (dwMilliseconds=0x5) [0269.048] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.050] Sleep (dwMilliseconds=0x5) [0269.093] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.094] Sleep (dwMilliseconds=0x5) [0269.142] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.144] Sleep (dwMilliseconds=0x5) [0269.190] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.193] Sleep (dwMilliseconds=0x5) [0269.236] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.238] Sleep (dwMilliseconds=0x5) [0269.281] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.283] Sleep (dwMilliseconds=0x5) [0269.327] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.329] Sleep (dwMilliseconds=0x5) [0269.373] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.375] Sleep (dwMilliseconds=0x5) [0269.422] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.424] Sleep (dwMilliseconds=0x5) [0269.467] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.468] Sleep (dwMilliseconds=0x5) [0269.521] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.524] Sleep (dwMilliseconds=0x5) [0269.556] Sleep (dwMilliseconds=0x5) [0269.597] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.598] Sleep (dwMilliseconds=0x5) [0269.640] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.642] Sleep (dwMilliseconds=0x5) [0269.685] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.686] Sleep (dwMilliseconds=0x5) [0269.734] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.736] Sleep (dwMilliseconds=0x5) [0269.781] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.783] Sleep (dwMilliseconds=0x5) [0269.835] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.837] Sleep (dwMilliseconds=0x5) [0269.880] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.882] Sleep (dwMilliseconds=0x5) [0269.922] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.924] Sleep (dwMilliseconds=0x5) [0269.968] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0269.970] Sleep (dwMilliseconds=0x5) [0270.015] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.016] Sleep (dwMilliseconds=0x5) [0270.061] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.063] Sleep (dwMilliseconds=0x5) [0270.108] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.110] Sleep (dwMilliseconds=0x5) [0270.156] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.158] Sleep (dwMilliseconds=0x5) [0270.222] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.224] Sleep (dwMilliseconds=0x5) [0270.270] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.273] Sleep (dwMilliseconds=0x5) [0270.317] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.319] Sleep (dwMilliseconds=0x5) [0270.360] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.362] Sleep (dwMilliseconds=0x5) [0270.408] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.410] Sleep (dwMilliseconds=0x5) [0270.454] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.457] Sleep (dwMilliseconds=0x5) [0270.502] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.504] Sleep (dwMilliseconds=0x5) [0270.548] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.549] Sleep (dwMilliseconds=0x5) [0270.594] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.596] Sleep (dwMilliseconds=0x5) [0270.639] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.641] Sleep (dwMilliseconds=0x5) [0270.686] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.688] Sleep (dwMilliseconds=0x5) [0270.732] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.735] Sleep (dwMilliseconds=0x5) [0270.781] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.783] Sleep (dwMilliseconds=0x5) [0270.833] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.835] Sleep (dwMilliseconds=0x5) [0270.877] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.879] Sleep (dwMilliseconds=0x5) [0270.920] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.922] Sleep (dwMilliseconds=0x5) [0270.966] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0270.968] Sleep (dwMilliseconds=0x5) [0271.017] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.019] Sleep (dwMilliseconds=0x5) [0271.069] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.071] Sleep (dwMilliseconds=0x5) [0271.104] Sleep (dwMilliseconds=0x5) [0271.142] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.144] Sleep (dwMilliseconds=0x5) [0271.188] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.190] Sleep (dwMilliseconds=0x5) [0271.251] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.254] Sleep (dwMilliseconds=0x5) [0271.303] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.305] Sleep (dwMilliseconds=0x5) [0271.338] Sleep (dwMilliseconds=0x5) [0271.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.379] Sleep (dwMilliseconds=0x5) [0271.422] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.424] Sleep (dwMilliseconds=0x5) [0271.469] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.471] Sleep (dwMilliseconds=0x5) [0271.516] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.519] Sleep (dwMilliseconds=0x5) [0271.560] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.563] Sleep (dwMilliseconds=0x5) [0271.609] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.612] Sleep (dwMilliseconds=0x5) [0271.651] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.653] Sleep (dwMilliseconds=0x5) [0271.703] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.705] Sleep (dwMilliseconds=0x5) [0271.746] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.748] Sleep (dwMilliseconds=0x5) [0271.796] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.799] Sleep (dwMilliseconds=0x5) [0271.840] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.843] Sleep (dwMilliseconds=0x5) [0271.886] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.889] Sleep (dwMilliseconds=0x5) [0271.937] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.939] Sleep (dwMilliseconds=0x5) [0271.983] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0271.986] Sleep (dwMilliseconds=0x5) [0272.028] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.031] Sleep (dwMilliseconds=0x5) [0272.075] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.077] Sleep (dwMilliseconds=0x5) [0272.124] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.126] Sleep (dwMilliseconds=0x5) [0272.171] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.173] Sleep (dwMilliseconds=0x5) [0272.228] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.231] Sleep (dwMilliseconds=0x5) [0272.280] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.282] Sleep (dwMilliseconds=0x5) [0272.326] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.328] Sleep (dwMilliseconds=0x5) [0272.371] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.374] Sleep (dwMilliseconds=0x5) [0272.418] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.420] Sleep (dwMilliseconds=0x5) [0272.464] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.467] Sleep (dwMilliseconds=0x5) [0272.513] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.515] Sleep (dwMilliseconds=0x5) [0272.562] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.564] Sleep (dwMilliseconds=0x5) [0272.604] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.606] Sleep (dwMilliseconds=0x5) [0272.653] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.655] Sleep (dwMilliseconds=0x5) [0272.699] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.701] Sleep (dwMilliseconds=0x5) [0272.744] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.746] Sleep (dwMilliseconds=0x5) [0272.797] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.799] Sleep (dwMilliseconds=0x5) [0272.841] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.843] Sleep (dwMilliseconds=0x5) [0272.887] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.889] Sleep (dwMilliseconds=0x5) [0272.933] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.935] Sleep (dwMilliseconds=0x5) [0272.980] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0272.982] Sleep (dwMilliseconds=0x5) [0273.026] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.027] Sleep (dwMilliseconds=0x5) [0273.072] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.074] Sleep (dwMilliseconds=0x5) [0273.120] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.122] Sleep (dwMilliseconds=0x5) [0273.164] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.166] Sleep (dwMilliseconds=0x5) [0273.213] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.214] Sleep (dwMilliseconds=0x5) [0273.259] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.261] Sleep (dwMilliseconds=0x5) [0273.307] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.309] Sleep (dwMilliseconds=0x5) [0273.344] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.346] Sleep (dwMilliseconds=0x5) [0273.387] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.390] Sleep (dwMilliseconds=0x5) [0273.436] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.438] Sleep (dwMilliseconds=0x5) [0273.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.481] Sleep (dwMilliseconds=0x5) [0273.527] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.529] Sleep (dwMilliseconds=0x5) [0273.575] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.577] Sleep (dwMilliseconds=0x5) [0273.618] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.620] Sleep (dwMilliseconds=0x5) [0273.667] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.669] Sleep (dwMilliseconds=0x5) [0273.714] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.716] Sleep (dwMilliseconds=0x5) [0273.762] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.764] Sleep (dwMilliseconds=0x5) [0273.805] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.807] Sleep (dwMilliseconds=0x5) [0273.818] Sleep (dwMilliseconds=0x5) [0273.834] Sleep (dwMilliseconds=0x5) [0273.855] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.857] Sleep (dwMilliseconds=0x5) [0273.862] Sleep (dwMilliseconds=0x5) [0273.883] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.885] Sleep (dwMilliseconds=0x5) [0273.911] Sleep (dwMilliseconds=0x5) [0273.965] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0273.968] Sleep (dwMilliseconds=0x5) [0274.008] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.011] Sleep (dwMilliseconds=0x5) [0274.057] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.059] Sleep (dwMilliseconds=0x5) [0274.106] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.108] Sleep (dwMilliseconds=0x5) [0274.167] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.169] Sleep (dwMilliseconds=0x5) [0274.210] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.212] Sleep (dwMilliseconds=0x5) [0274.278] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.280] Sleep (dwMilliseconds=0x5) [0274.320] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.324] Sleep (dwMilliseconds=0x5) [0274.370] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.373] Sleep (dwMilliseconds=0x5) [0274.413] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.415] Sleep (dwMilliseconds=0x5) [0274.467] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.469] Sleep (dwMilliseconds=0x5) [0274.509] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.511] Sleep (dwMilliseconds=0x5) [0274.555] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.557] Sleep (dwMilliseconds=0x5) [0274.599] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.601] Sleep (dwMilliseconds=0x5) [0274.647] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.648] Sleep (dwMilliseconds=0x5) [0274.693] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.695] Sleep (dwMilliseconds=0x5) [0274.742] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.744] Sleep (dwMilliseconds=0x5) [0274.782] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.790] Sleep (dwMilliseconds=0x5) [0274.833] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.835] Sleep (dwMilliseconds=0x5) [0274.880] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.882] Sleep (dwMilliseconds=0x5) [0274.930] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.932] Sleep (dwMilliseconds=0x5) [0274.976] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0274.978] Sleep (dwMilliseconds=0x5) [0275.022] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.023] Sleep (dwMilliseconds=0x5) [0275.069] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.071] Sleep (dwMilliseconds=0x5) [0275.116] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.118] Sleep (dwMilliseconds=0x5) [0275.160] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.162] Sleep (dwMilliseconds=0x5) [0275.213] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.215] Sleep (dwMilliseconds=0x5) [0275.259] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.272] Sleep (dwMilliseconds=0x5) [0275.319] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.321] Sleep (dwMilliseconds=0x5) [0275.365] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.367] Sleep (dwMilliseconds=0x5) [0275.410] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.412] Sleep (dwMilliseconds=0x5) [0275.457] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.459] Sleep (dwMilliseconds=0x5) [0275.505] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.506] Sleep (dwMilliseconds=0x5) [0275.551] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.552] Sleep (dwMilliseconds=0x5) [0275.599] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.601] Sleep (dwMilliseconds=0x5) [0275.647] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.649] Sleep (dwMilliseconds=0x5) [0275.694] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.695] Sleep (dwMilliseconds=0x5) [0275.738] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.740] Sleep (dwMilliseconds=0x5) [0275.789] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.833] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.835] Sleep (dwMilliseconds=0x5) [0275.882] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.883] Sleep (dwMilliseconds=0x5) [0275.925] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.928] Sleep (dwMilliseconds=0x5) [0275.972] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0275.974] Sleep (dwMilliseconds=0x5) [0276.021] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.069] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.071] Sleep (dwMilliseconds=0x5) [0276.114] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.117] Sleep (dwMilliseconds=0x5) [0276.162] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.164] Sleep (dwMilliseconds=0x5) [0276.211] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.213] Sleep (dwMilliseconds=0x5) [0276.254] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.256] Sleep (dwMilliseconds=0x5) [0276.301] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.303] Sleep (dwMilliseconds=0x5) [0276.349] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.351] Sleep (dwMilliseconds=0x5) [0276.395] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.397] Sleep (dwMilliseconds=0x5) [0276.440] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.441] Sleep (dwMilliseconds=0x5) [0276.491] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.493] Sleep (dwMilliseconds=0x5) [0276.541] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.543] Sleep (dwMilliseconds=0x5) [0276.584] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.586] Sleep (dwMilliseconds=0x5) [0276.630] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.632] Sleep (dwMilliseconds=0x5) [0276.676] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.678] Sleep (dwMilliseconds=0x5) [0276.722] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.725] Sleep (dwMilliseconds=0x5) [0276.769] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.770] Sleep (dwMilliseconds=0x5) [0276.818] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.821] Sleep (dwMilliseconds=0x5) [0276.866] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.869] Sleep (dwMilliseconds=0x5) [0276.915] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.917] Sleep (dwMilliseconds=0x5) [0276.958] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0276.960] Sleep (dwMilliseconds=0x5) [0277.006] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.008] Sleep (dwMilliseconds=0x5) [0277.049] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.051] Sleep (dwMilliseconds=0x5) [0277.100] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.102] Sleep (dwMilliseconds=0x5) [0277.148] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.151] Sleep (dwMilliseconds=0x5) [0277.193] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.196] Sleep (dwMilliseconds=0x5) [0277.240] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.242] Sleep (dwMilliseconds=0x5) [0277.285] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.288] Sleep (dwMilliseconds=0x5) [0277.347] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.349] Sleep (dwMilliseconds=0x5) [0277.392] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.394] Sleep (dwMilliseconds=0x5) [0277.439] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.441] Sleep (dwMilliseconds=0x5) [0277.487] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.489] Sleep (dwMilliseconds=0x5) [0277.534] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.536] Sleep (dwMilliseconds=0x5) [0277.579] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.581] Sleep (dwMilliseconds=0x5) [0277.629] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.630] Sleep (dwMilliseconds=0x5) [0277.673] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.675] Sleep (dwMilliseconds=0x5) [0277.720] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.768] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.770] Sleep (dwMilliseconds=0x5) [0277.818] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.821] Sleep (dwMilliseconds=0x5) [0277.866] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.868] Sleep (dwMilliseconds=0x5) [0277.913] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.916] Sleep (dwMilliseconds=0x5) [0277.959] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0277.962] Sleep (dwMilliseconds=0x5) [0278.001] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.003] Sleep (dwMilliseconds=0x5) [0278.050] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.052] Sleep (dwMilliseconds=0x5) [0278.102] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.104] Sleep (dwMilliseconds=0x5) [0278.143] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.145] Sleep (dwMilliseconds=0x5) [0278.189] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.191] Sleep (dwMilliseconds=0x5) [0278.236] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.238] Sleep (dwMilliseconds=0x5) [0278.282] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.285] Sleep (dwMilliseconds=0x5) [0278.338] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.340] Sleep (dwMilliseconds=0x5) [0278.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.380] Sleep (dwMilliseconds=0x5) [0278.425] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.428] Sleep (dwMilliseconds=0x5) [0278.471] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.473] Sleep (dwMilliseconds=0x5) [0278.516] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.519] Sleep (dwMilliseconds=0x5) [0278.564] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.566] Sleep (dwMilliseconds=0x5) [0278.610] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.611] Sleep (dwMilliseconds=0x5) [0278.655] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.657] Sleep (dwMilliseconds=0x5) [0278.706] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.708] Sleep (dwMilliseconds=0x5) [0278.753] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.755] Sleep (dwMilliseconds=0x5) [0278.801] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.804] Sleep (dwMilliseconds=0x5) [0278.847] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.850] Sleep (dwMilliseconds=0x5) [0278.894] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.896] Sleep (dwMilliseconds=0x5) [0278.941] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.943] Sleep (dwMilliseconds=0x5) [0278.986] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0278.988] Sleep (dwMilliseconds=0x5) [0279.035] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.037] Sleep (dwMilliseconds=0x5) [0279.081] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.083] Sleep (dwMilliseconds=0x5) [0279.132] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.135] Sleep (dwMilliseconds=0x5) [0279.174] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.176] Sleep (dwMilliseconds=0x5) [0279.220] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.222] Sleep (dwMilliseconds=0x5) [0279.270] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.272] Sleep (dwMilliseconds=0x5) [0279.315] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.317] Sleep (dwMilliseconds=0x5) [0279.370] Sleep (dwMilliseconds=0x5) [0279.408] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.410] Sleep (dwMilliseconds=0x5) [0279.453] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.455] Sleep (dwMilliseconds=0x5) [0279.503] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.506] Sleep (dwMilliseconds=0x5) [0279.547] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.549] Sleep (dwMilliseconds=0x5) [0279.592] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.595] Sleep (dwMilliseconds=0x5) [0279.639] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.641] Sleep (dwMilliseconds=0x5) [0279.688] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.690] Sleep (dwMilliseconds=0x5) [0279.734] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.736] Sleep (dwMilliseconds=0x5) [0279.781] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.783] Sleep (dwMilliseconds=0x5) [0279.827] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.829] Sleep (dwMilliseconds=0x5) [0279.874] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.876] Sleep (dwMilliseconds=0x5) [0279.919] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.921] Sleep (dwMilliseconds=0x5) [0279.965] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0279.967] Sleep (dwMilliseconds=0x5) [0280.015] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.017] Sleep (dwMilliseconds=0x5) [0280.061] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.063] Sleep (dwMilliseconds=0x5) [0280.107] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.108] Sleep (dwMilliseconds=0x5) [0280.154] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.155] Sleep (dwMilliseconds=0x5) [0280.202] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.204] Sleep (dwMilliseconds=0x5) [0280.248] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.250] Sleep (dwMilliseconds=0x5) [0280.299] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.301] Sleep (dwMilliseconds=0x5) [0280.347] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.349] Sleep (dwMilliseconds=0x5) [0280.395] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.407] Sleep (dwMilliseconds=0x5) [0280.454] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.456] Sleep (dwMilliseconds=0x5) [0280.503] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.505] Sleep (dwMilliseconds=0x5) [0280.548] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.551] Sleep (dwMilliseconds=0x5) [0280.596] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.598] Sleep (dwMilliseconds=0x5) [0280.641] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.644] Sleep (dwMilliseconds=0x5) [0280.687] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.689] Sleep (dwMilliseconds=0x5) [0280.735] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.738] Sleep (dwMilliseconds=0x5) [0280.784] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.786] Sleep (dwMilliseconds=0x5) [0280.820] Sleep (dwMilliseconds=0x5) [0280.860] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.862] Sleep (dwMilliseconds=0x5) [0280.904] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.907] Sleep (dwMilliseconds=0x5) [0280.951] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0280.953] Sleep (dwMilliseconds=0x5) [0281.003] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.005] Sleep (dwMilliseconds=0x5) [0281.045] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.048] Sleep (dwMilliseconds=0x5) [0281.094] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.097] Sleep (dwMilliseconds=0x5) [0281.142] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.144] Sleep (dwMilliseconds=0x5) [0281.188] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.190] Sleep (dwMilliseconds=0x5) [0281.230] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.231] Sleep (dwMilliseconds=0x5) [0281.281] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.283] Sleep (dwMilliseconds=0x5) [0281.323] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.325] Sleep (dwMilliseconds=0x5) [0281.373] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.374] Sleep (dwMilliseconds=0x5) [0281.420] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.422] Sleep (dwMilliseconds=0x5) [0281.465] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.466] Sleep (dwMilliseconds=0x5) [0281.512] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.514] Sleep (dwMilliseconds=0x5) [0281.559] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.561] Sleep (dwMilliseconds=0x5) [0281.606] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.607] Sleep (dwMilliseconds=0x5) [0281.653] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.654] Sleep (dwMilliseconds=0x5) [0281.698] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.700] Sleep (dwMilliseconds=0x5) [0281.747] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.749] Sleep (dwMilliseconds=0x5) [0281.792] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.794] Sleep (dwMilliseconds=0x5) [0281.837] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.839] Sleep (dwMilliseconds=0x5) [0281.887] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.890] Sleep (dwMilliseconds=0x5) [0281.937] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.939] Sleep (dwMilliseconds=0x5) [0281.980] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0281.982] Sleep (dwMilliseconds=0x5) [0282.026] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.029] Sleep (dwMilliseconds=0x5) [0282.076] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.078] Sleep (dwMilliseconds=0x5) [0282.123] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.125] Sleep (dwMilliseconds=0x5) [0282.167] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.169] Sleep (dwMilliseconds=0x5) [0282.215] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.217] Sleep (dwMilliseconds=0x5) [0282.264] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.266] Sleep (dwMilliseconds=0x5) [0282.307] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.309] Sleep (dwMilliseconds=0x5) [0282.354] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.357] Sleep (dwMilliseconds=0x5) [0282.403] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.405] Sleep (dwMilliseconds=0x5) [0282.470] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.472] Sleep (dwMilliseconds=0x5) [0282.514] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.516] Sleep (dwMilliseconds=0x5) [0282.558] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.560] Sleep (dwMilliseconds=0x5) [0282.612] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.614] Sleep (dwMilliseconds=0x5) [0282.653] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.655] Sleep (dwMilliseconds=0x5) [0282.698] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.700] Sleep (dwMilliseconds=0x5) [0282.743] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.745] Sleep (dwMilliseconds=0x5) [0282.790] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.792] Sleep (dwMilliseconds=0x5) [0282.842] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.844] Sleep (dwMilliseconds=0x5) [0282.888] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.890] Sleep (dwMilliseconds=0x5) [0282.936] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.938] Sleep (dwMilliseconds=0x5) [0282.980] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0282.983] Sleep (dwMilliseconds=0x5) [0283.023] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.025] Sleep (dwMilliseconds=0x5) [0283.073] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.075] Sleep (dwMilliseconds=0x5) [0283.124] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.126] Sleep (dwMilliseconds=0x5) [0283.165] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.166] Sleep (dwMilliseconds=0x5) [0283.212] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.213] Sleep (dwMilliseconds=0x5) [0283.259] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.261] Sleep (dwMilliseconds=0x5) [0283.306] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.308] Sleep (dwMilliseconds=0x5) [0283.350] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.352] Sleep (dwMilliseconds=0x5) [0283.399] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000 | out: BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, OldAccessProtection=0x22b0000*=0x1) returned 0x0 [0283.401] Sleep (dwMilliseconds=0x5) [0283.451] NtProtectVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x22b0014*=0x401000, NumberOfBytesToProtect=0x22b0018, NewAccessProtection=0x1, OldAccessProtection=0x22b0000) Process: id = "3" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x6d3a000" os_pid = "0x360" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x1c4" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d8ed" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 528 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 529 start_va = 0x20000 end_va = 0x20fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\System32\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\svchost.exe.mui") Region: id = 530 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 531 start_va = 0x40000 end_va = 0x40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 532 start_va = 0x50000 end_va = 0x50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 533 start_va = 0x60000 end_va = 0x60fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 534 start_va = 0x70000 end_va = 0x70fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 535 start_va = 0x80000 end_va = 0x17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000080000" filename = "" Region: id = 536 start_va = 0x180000 end_va = 0x180fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000180000" filename = "" Region: id = 537 start_va = 0x190000 end_va = 0x20ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 538 start_va = 0x210000 end_va = 0x276fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 539 start_va = 0x280000 end_va = 0x280fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000280000" filename = "" Region: id = 540 start_va = 0x290000 end_va = 0x290fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wshtcpip.dll.mui" filename = "\\Windows\\System32\\en-US\\wshtcpip.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wshtcpip.dll.mui") Region: id = 541 start_va = 0x2a0000 end_va = 0x2a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wship6.dll.mui" filename = "\\Windows\\System32\\en-US\\wship6.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wship6.dll.mui") Region: id = 542 start_va = 0x2b0000 end_va = 0x2b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002b0000" filename = "" Region: id = 543 start_va = 0x2c0000 end_va = 0x2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002c0000" filename = "" Region: id = 544 start_va = 0x2d0000 end_va = 0x2e9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002d0000" filename = "" Region: id = 545 start_va = 0x2f0000 end_va = 0x2f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002f0000" filename = "" Region: id = 546 start_va = 0x300000 end_va = 0x300fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000300000" filename = "" Region: id = 547 start_va = 0x310000 end_va = 0x31afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\gpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\gpsvc.dll.mui") Region: id = 548 start_va = 0x320000 end_va = 0x32cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "setupapi.dll.mui" filename = "\\Windows\\System32\\en-US\\setupapi.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\setupapi.dll.mui") Region: id = 549 start_va = 0x330000 end_va = 0x33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000330000" filename = "" Region: id = 550 start_va = 0x340000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000340000" filename = "" Region: id = 551 start_va = 0x440000 end_va = 0x5c7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 552 start_va = 0x5d0000 end_va = 0x750fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 553 start_va = 0x760000 end_va = 0x81ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000760000" filename = "" Region: id = 554 start_va = 0x8a0000 end_va = 0x8a3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "taskcomp.dll.mui" filename = "\\Windows\\System32\\en-US\\taskcomp.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\taskcomp.dll.mui") Region: id = 555 start_va = 0x8b0000 end_va = 0x8b9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "schedsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\schedsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\schedsvc.dll.mui") Region: id = 556 start_va = 0x8c0000 end_va = 0x8c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 557 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 558 start_va = 0x8e0000 end_va = 0x8e1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008e0000" filename = "" Region: id = 559 start_va = 0x8f0000 end_va = 0x8f3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 560 start_va = 0x900000 end_va = 0x901fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000900000" filename = "" Region: id = 561 start_va = 0x910000 end_va = 0x98ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000910000" filename = "" Region: id = 562 start_va = 0x990000 end_va = 0x9bffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000e.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000e.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000e.db") Region: id = 563 start_va = 0x9c0000 end_va = 0xa3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000009c0000" filename = "" Region: id = 564 start_va = 0xa40000 end_va = 0xa43fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 565 start_va = 0xa50000 end_va = 0xab5fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db") Region: id = 566 start_va = 0xac0000 end_va = 0xacdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\System32\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\propsys.dll.mui") Region: id = 567 start_va = 0xb50000 end_va = 0xe1efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 568 start_va = 0xe20000 end_va = 0xe27fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vsstrace.dll.mui" filename = "\\Windows\\System32\\en-US\\vsstrace.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\vsstrace.dll.mui") Region: id = 569 start_va = 0xe30000 end_va = 0xe30fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000e30000" filename = "" Region: id = 570 start_va = 0xe40000 end_va = 0xe5bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "firewallapi.dll.mui" filename = "\\Windows\\System32\\en-US\\FirewallAPI.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\firewallapi.dll.mui") Region: id = 571 start_va = 0xe60000 end_va = 0xe60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000e60000" filename = "" Region: id = 572 start_va = 0xe70000 end_va = 0xe70fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e70000" filename = "" Region: id = 573 start_va = 0xe80000 end_va = 0xe80fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000e80000" filename = "" Region: id = 574 start_va = 0xe90000 end_va = 0xe97fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e90000" filename = "" Region: id = 575 start_va = 0xea0000 end_va = 0xeaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ea0000" filename = "" Region: id = 576 start_va = 0xeb0000 end_va = 0xebffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000eb0000" filename = "" Region: id = 577 start_va = 0xec0000 end_va = 0xec0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msxml3r.dll" filename = "\\Windows\\System32\\msxml3r.dll" (normalized: "c:\\windows\\system32\\msxml3r.dll") Region: id = 578 start_va = 0xed0000 end_va = 0xeeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ed0000" filename = "" Region: id = 579 start_va = 0xef0000 end_va = 0xef2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wuaueng.dll.mui" filename = "\\Windows\\System32\\en-US\\wuaueng.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wuaueng.dll.mui") Region: id = 580 start_va = 0xf00000 end_va = 0xf00fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000f00000" filename = "" Region: id = 581 start_va = 0xf40000 end_va = 0xfbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f40000" filename = "" Region: id = 582 start_va = 0xfc0000 end_va = 0xfcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000fc0000" filename = "" Region: id = 583 start_va = 0xfd0000 end_va = 0xfd0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000fd0000" filename = "" Region: id = 584 start_va = 0xfe0000 end_va = 0x105ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000fe0000" filename = "" Region: id = 585 start_va = 0x1060000 end_va = 0x106ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001060000" filename = "" Region: id = 586 start_va = 0x1070000 end_va = 0x107ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001070000" filename = "" Region: id = 587 start_va = 0x1080000 end_va = 0x108ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001080000" filename = "" Region: id = 588 start_va = 0x1090000 end_va = 0x109ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001090000" filename = "" Region: id = 589 start_va = 0x10a0000 end_va = 0x10affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000010a0000" filename = "" Region: id = 590 start_va = 0x10b0000 end_va = 0x10bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000010b0000" filename = "" Region: id = 591 start_va = 0x10c0000 end_va = 0x10c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000010c0000" filename = "" Region: id = 592 start_va = 0x10d0000 end_va = 0x10d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000010d0000" filename = "" Region: id = 593 start_va = 0x10e0000 end_va = 0x115ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000010e0000" filename = "" Region: id = 594 start_va = 0x1160000 end_va = 0x116ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001160000" filename = "" Region: id = 595 start_va = 0x1170000 end_va = 0x1177fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001170000" filename = "" Region: id = 596 start_va = 0x1180000 end_va = 0x11fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001180000" filename = "" Region: id = 597 start_va = 0x1200000 end_va = 0x120ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001200000" filename = "" Region: id = 598 start_va = 0x1210000 end_va = 0x128ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001210000" filename = "" Region: id = 599 start_va = 0x1290000 end_va = 0x129ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001290000" filename = "" Region: id = 600 start_va = 0x12a0000 end_va = 0x131ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012a0000" filename = "" Region: id = 601 start_va = 0x1320000 end_va = 0x132ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001320000" filename = "" Region: id = 602 start_va = 0x1330000 end_va = 0x133ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 603 start_va = 0x1340000 end_va = 0x13bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001340000" filename = "" Region: id = 604 start_va = 0x13c0000 end_va = 0x13cffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 605 start_va = 0x13d0000 end_va = 0x13d7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000013d0000" filename = "" Region: id = 606 start_va = 0x13e0000 end_va = 0x13effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000013e0000" filename = "" Region: id = 607 start_va = 0x13f0000 end_va = 0x13fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000013f0000" filename = "" Region: id = 608 start_va = 0x1400000 end_va = 0x1407fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001400000" filename = "" Region: id = 609 start_va = 0x1410000 end_va = 0x148ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001410000" filename = "" Region: id = 610 start_va = 0x1490000 end_va = 0x149ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001490000" filename = "" Region: id = 611 start_va = 0x14a0000 end_va = 0x14affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000014a0000" filename = "" Region: id = 612 start_va = 0x14b0000 end_va = 0x14bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000014b0000" filename = "" Region: id = 613 start_va = 0x14c0000 end_va = 0x14cffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000014c0000" filename = "" Region: id = 614 start_va = 0x14d0000 end_va = 0x14dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000014d0000" filename = "" Region: id = 615 start_va = 0x14e0000 end_va = 0x14effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000014e0000" filename = "" Region: id = 616 start_va = 0x1570000 end_va = 0x157ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001570000" filename = "" Region: id = 617 start_va = 0x1580000 end_va = 0x15fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001580000" filename = "" Region: id = 618 start_va = 0x1600000 end_va = 0x167ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001600000" filename = "" Region: id = 619 start_va = 0x16f0000 end_va = 0x176ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000016f0000" filename = "" Region: id = 620 start_va = 0x1770000 end_va = 0x17affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001770000" filename = "" Region: id = 621 start_va = 0x17b0000 end_va = 0x17effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000017b0000" filename = "" Region: id = 622 start_va = 0x1800000 end_va = 0x187ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001800000" filename = "" Region: id = 623 start_va = 0x1930000 end_va = 0x19affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001930000" filename = "" Region: id = 624 start_va = 0x19c0000 end_va = 0x1a3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000019c0000" filename = "" Region: id = 625 start_va = 0x1ab0000 end_va = 0x1b2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ab0000" filename = "" Region: id = 626 start_va = 0x1b30000 end_va = 0x1baffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001b30000" filename = "" Region: id = 627 start_va = 0x1bb0000 end_va = 0x1caffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001bb0000" filename = "" Region: id = 628 start_va = 0x1cb0000 end_va = 0x1daffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001cb0000" filename = "" Region: id = 629 start_va = 0x1e20000 end_va = 0x1e9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001e20000" filename = "" Region: id = 630 start_va = 0x1ea0000 end_va = 0x1f1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ea0000" filename = "" Region: id = 631 start_va = 0x1f30000 end_va = 0x1faffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f30000" filename = "" Region: id = 632 start_va = 0x1fb0000 end_va = 0x202ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001fb0000" filename = "" Region: id = 633 start_va = 0x2070000 end_va = 0x20effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002070000" filename = "" Region: id = 634 start_va = 0x2120000 end_va = 0x219ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002120000" filename = "" Region: id = 635 start_va = 0x21e0000 end_va = 0x225ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000021e0000" filename = "" Region: id = 636 start_va = 0x22e0000 end_va = 0x22effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022e0000" filename = "" Region: id = 637 start_va = 0x22f0000 end_va = 0x23effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000022f0000" filename = "" Region: id = 638 start_va = 0x2490000 end_va = 0x250ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002490000" filename = "" Region: id = 639 start_va = 0x2560000 end_va = 0x265ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002560000" filename = "" Region: id = 640 start_va = 0x2660000 end_va = 0x266ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002660000" filename = "" Region: id = 641 start_va = 0x2670000 end_va = 0x276ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002670000" filename = "" Region: id = 642 start_va = 0x2800000 end_va = 0x280ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002800000" filename = "" Region: id = 643 start_va = 0x2810000 end_va = 0x288ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002810000" filename = "" Region: id = 644 start_va = 0x28c0000 end_va = 0x293ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000028c0000" filename = "" Region: id = 645 start_va = 0x2a40000 end_va = 0x2abffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a40000" filename = "" Region: id = 646 start_va = 0x2b10000 end_va = 0x2b8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b10000" filename = "" Region: id = 647 start_va = 0x2b90000 end_va = 0x2c0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b90000" filename = "" Region: id = 648 start_va = 0x2c50000 end_va = 0x2ccffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c50000" filename = "" Region: id = 649 start_va = 0x2d40000 end_va = 0x2dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002d40000" filename = "" Region: id = 650 start_va = 0x2dc0000 end_va = 0x2fbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002dc0000" filename = "" Region: id = 651 start_va = 0x2fc0000 end_va = 0x30bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002fc0000" filename = "" Region: id = 652 start_va = 0x30d0000 end_va = 0x314ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000030d0000" filename = "" Region: id = 653 start_va = 0x3150000 end_va = 0x31cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003150000" filename = "" Region: id = 654 start_va = 0x31f0000 end_va = 0x326ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000031f0000" filename = "" Region: id = 655 start_va = 0x34b0000 end_va = 0x352ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000034b0000" filename = "" Region: id = 656 start_va = 0x36a0000 end_va = 0x371ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036a0000" filename = "" Region: id = 657 start_va = 0x3720000 end_va = 0x37dffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 658 start_va = 0x39b0000 end_va = 0x3a2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000039b0000" filename = "" Region: id = 659 start_va = 0x3a30000 end_va = 0x3e2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003a30000" filename = "" Region: id = 660 start_va = 0x4240000 end_va = 0x42bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004240000" filename = "" Region: id = 661 start_va = 0x4310000 end_va = 0x438ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004310000" filename = "" Region: id = 662 start_va = 0x4390000 end_va = 0x458ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004390000" filename = "" Region: id = 663 start_va = 0x4700000 end_va = 0x477ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004700000" filename = "" Region: id = 664 start_va = 0x4780000 end_va = 0x487ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004780000" filename = "" Region: id = 665 start_va = 0x4880000 end_va = 0x497ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004880000" filename = "" Region: id = 666 start_va = 0x4980000 end_va = 0x4a7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004980000" filename = "" Region: id = 667 start_va = 0x4a80000 end_va = 0x4b7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a80000" filename = "" Region: id = 668 start_va = 0x4b80000 end_va = 0x4c7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b80000" filename = "" Region: id = 669 start_va = 0x4cc0000 end_va = 0x4d3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004cc0000" filename = "" Region: id = 670 start_va = 0x4d60000 end_va = 0x4ddffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004d60000" filename = "" Region: id = 671 start_va = 0x4de0000 end_va = 0x4edffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004de0000" filename = "" Region: id = 672 start_va = 0x4ee0000 end_va = 0x4fdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004ee0000" filename = "" Region: id = 673 start_va = 0x4fe0000 end_va = 0x5fdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004fe0000" filename = "" Region: id = 674 start_va = 0x5fe0000 end_va = 0x605ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005fe0000" filename = "" Region: id = 675 start_va = 0x6080000 end_va = 0x60fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006080000" filename = "" Region: id = 676 start_va = 0x6220000 end_va = 0x629ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006220000" filename = "" Region: id = 677 start_va = 0x62b0000 end_va = 0x632ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000062b0000" filename = "" Region: id = 678 start_va = 0x64e0000 end_va = 0x655ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000064e0000" filename = "" Region: id = 679 start_va = 0x6560000 end_va = 0x695ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006560000" filename = "" Region: id = 680 start_va = 0x76d50000 end_va = 0x76e49fff monitored = 0 entry_point = 0x76d6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 681 start_va = 0x76e50000 end_va = 0x76f6efff monitored = 0 entry_point = 0x76e65340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 682 start_va = 0x76f70000 end_va = 0x77118fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 683 start_va = 0x77140000 end_va = 0x77146fff monitored = 0 entry_point = 0x7714106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Region: id = 684 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 685 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 686 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 687 start_va = 0xff870000 end_va = 0xff87afff monitored = 0 entry_point = 0xff87246c region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 688 start_va = 0x7fef0380000 end_va = 0x7fef05d2fff monitored = 0 entry_point = 0x7fef038236c region_type = mapped_file name = "wuaueng.dll" filename = "\\Windows\\System32\\wuaueng.dll" (normalized: "c:\\windows\\system32\\wuaueng.dll") Region: id = 689 start_va = 0x7fef0bc0000 end_va = 0x7fef0d93fff monitored = 0 entry_point = 0x7fef0bf6b00 region_type = mapped_file name = "msxml3.dll" filename = "\\Windows\\System32\\msxml3.dll" (normalized: "c:\\windows\\system32\\msxml3.dll") Region: id = 690 start_va = 0x7fef1de0000 end_va = 0x7fef1eb1fff monitored = 0 entry_point = 0x7fef1e71a10 region_type = mapped_file name = "qmgr.dll" filename = "\\Windows\\System32\\qmgr.dll" (normalized: "c:\\windows\\system32\\qmgr.dll") Region: id = 691 start_va = 0x7fef2000000 end_va = 0x7fef2019fff monitored = 0 entry_point = 0x7fef2011ae4 region_type = mapped_file name = "rascfg.dll" filename = "\\Windows\\System32\\rascfg.dll" (normalized: "c:\\windows\\system32\\rascfg.dll") Region: id = 692 start_va = 0x7fef2380000 end_va = 0x7fef2389fff monitored = 0 entry_point = 0x7fef2383994 region_type = mapped_file name = "bitsperf.dll" filename = "\\Windows\\System32\\bitsperf.dll" (normalized: "c:\\windows\\system32\\bitsperf.dll") Region: id = 693 start_va = 0x7fef3710000 end_va = 0x7fef371efff monitored = 0 entry_point = 0x7fef3716894 region_type = mapped_file name = "ndiscapcfg.dll" filename = "\\Windows\\System32\\ndiscapCfg.dll" (normalized: "c:\\windows\\system32\\ndiscapcfg.dll") Region: id = 694 start_va = 0x7fef3810000 end_va = 0x7fef382bfff monitored = 0 entry_point = 0x7fef38111a0 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\System32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll") Region: id = 695 start_va = 0x7fef3830000 end_va = 0x7fef3891fff monitored = 0 entry_point = 0x7fef3831198 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\System32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll") Region: id = 696 start_va = 0x7fef38a0000 end_va = 0x7fef38d9fff monitored = 0 entry_point = 0x7fef38a1010 region_type = mapped_file name = "mprapi.dll" filename = "\\Windows\\System32\\mprapi.dll" (normalized: "c:\\windows\\system32\\mprapi.dll") Region: id = 697 start_va = 0x7fef3ff0000 end_va = 0x7fef4269fff monitored = 0 entry_point = 0x7fef4022200 region_type = mapped_file name = "esent.dll" filename = "\\Windows\\System32\\esent.dll" (normalized: "c:\\windows\\system32\\esent.dll") Region: id = 698 start_va = 0x7fef45f0000 end_va = 0x7fef4604fff monitored = 0 entry_point = 0x7fef45f1020 region_type = mapped_file name = "appinfo.dll" filename = "\\Windows\\System32\\appinfo.dll" (normalized: "c:\\windows\\system32\\appinfo.dll") Region: id = 699 start_va = 0x7fef4610000 end_va = 0x7fef461efff monitored = 0 entry_point = 0x7fef4619a48 region_type = mapped_file name = "mspatcha.dll" filename = "\\Windows\\System32\\mspatcha.dll" (normalized: "c:\\windows\\system32\\mspatcha.dll") Region: id = 700 start_va = 0x7fef4620000 end_va = 0x7fef463cfff monitored = 0 entry_point = 0x7fef4622f18 region_type = mapped_file name = "mmcss.dll" filename = "\\Windows\\System32\\mmcss.dll" (normalized: "c:\\windows\\system32\\mmcss.dll") Region: id = 701 start_va = 0x7fef49c0000 end_va = 0x7fef4aadfff monitored = 0 entry_point = 0x7fef49c12a0 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 702 start_va = 0x7fef4bf0000 end_va = 0x7fef4c31fff monitored = 0 entry_point = 0x7fef4c20048 region_type = mapped_file name = "tcpipcfg.dll" filename = "\\Windows\\System32\\tcpipcfg.dll" (normalized: "c:\\windows\\system32\\tcpipcfg.dll") Region: id = 703 start_va = 0x7fef6250000 end_va = 0x7fef625bfff monitored = 0 entry_point = 0x7fef625602c region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 704 start_va = 0x7fef63a0000 end_va = 0x7fef63b6fff monitored = 0 entry_point = 0x7fef63a9d50 region_type = mapped_file name = "ncprov.dll" filename = "\\Windows\\System32\\wbem\\NCProv.dll" (normalized: "c:\\windows\\system32\\wbem\\ncprov.dll") Region: id = 705 start_va = 0x7fef63c0000 end_va = 0x7fef643bfff monitored = 0 entry_point = 0x7fef63c11d4 region_type = mapped_file name = "wer.dll" filename = "\\Windows\\System32\\wer.dll" (normalized: "c:\\windows\\system32\\wer.dll") Region: id = 706 start_va = 0x7fef6670000 end_va = 0x7fef6677fff monitored = 0 entry_point = 0x7fef6671414 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 707 start_va = 0x7fef6680000 end_va = 0x7fef66f0fff monitored = 0 entry_point = 0x7fef66c51d0 region_type = mapped_file name = "wbemess.dll" filename = "\\Windows\\System32\\wbem\\wbemess.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemess.dll") Region: id = 708 start_va = 0x7fef6700000 end_va = 0x7fef6711fff monitored = 0 entry_point = 0x7fef67089d0 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll") Region: id = 709 start_va = 0x7fef6720000 end_va = 0x7fef67d4fff monitored = 0 entry_point = 0x7fef679cf80 region_type = mapped_file name = "wmiprvsd.dll" filename = "\\Windows\\System32\\wbem\\WmiPrvSD.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprvsd.dll") Region: id = 710 start_va = 0x7fef67e0000 end_va = 0x7fef67f8fff monitored = 0 entry_point = 0x7fef67e1104 region_type = mapped_file name = "resutils.dll" filename = "\\Windows\\System32\\resutils.dll" (normalized: "c:\\windows\\system32\\resutils.dll") Region: id = 711 start_va = 0x7fef6800000 end_va = 0x7fef684ffff monitored = 0 entry_point = 0x7fef6801190 region_type = mapped_file name = "clusapi.dll" filename = "\\Windows\\System32\\clusapi.dll" (normalized: "c:\\windows\\system32\\clusapi.dll") Region: id = 712 start_va = 0x7fef6850000 end_va = 0x7fef6857fff monitored = 0 entry_point = 0x7fef6851020 region_type = mapped_file name = "sscore.dll" filename = "\\Windows\\System32\\sscore.dll" (normalized: "c:\\windows\\system32\\sscore.dll") Region: id = 713 start_va = 0x7fef6860000 end_va = 0x7fef68b9fff monitored = 0 entry_point = 0x7fef689dde0 region_type = mapped_file name = "repdrvfs.dll" filename = "\\Windows\\System32\\wbem\\repdrvfs.dll" (normalized: "c:\\windows\\system32\\wbem\\repdrvfs.dll") Region: id = 714 start_va = 0x7fef68c0000 end_va = 0x7fef68e0fff monitored = 0 entry_point = 0x7fef68d03b0 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 715 start_va = 0x7fef68f0000 end_va = 0x7fef695afff monitored = 0 entry_point = 0x7fef6934344 region_type = mapped_file name = "hnetcfg.dll" filename = "\\Windows\\System32\\hnetcfg.dll" (normalized: "c:\\windows\\system32\\hnetcfg.dll") Region: id = 716 start_va = 0x7fef6960000 end_va = 0x7fef6972fff monitored = 0 entry_point = 0x7fef6961d80 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 717 start_va = 0x7fef6980000 end_va = 0x7fef69e1fff monitored = 0 entry_point = 0x7fef69bbd80 region_type = mapped_file name = "esscli.dll" filename = "\\Windows\\System32\\wbem\\esscli.dll" (normalized: "c:\\windows\\system32\\wbem\\esscli.dll") Region: id = 718 start_va = 0x7fef69f0000 end_va = 0x7fef6b1bfff monitored = 0 entry_point = 0x7fef6aa0ef0 region_type = mapped_file name = "wbemcore.dll" filename = "\\Windows\\System32\\wbem\\wbemcore.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemcore.dll") Region: id = 719 start_va = 0x7fef6b20000 end_va = 0x7fef6b39fff monitored = 0 entry_point = 0x7fef6b33fbc region_type = mapped_file name = "nci.dll" filename = "\\Windows\\System32\\nci.dll" (normalized: "c:\\windows\\system32\\nci.dll") Region: id = 720 start_va = 0x7fef6b40000 end_va = 0x7fef6bc3fff monitored = 0 entry_point = 0x7fef6b91118 region_type = mapped_file name = "netcfgx.dll" filename = "\\Windows\\System32\\netcfgx.dll" (normalized: "c:\\windows\\system32\\netcfgx.dll") Region: id = 721 start_va = 0x7fef6bd0000 end_va = 0x7fef6bf4fff monitored = 0 entry_point = 0x7fef6be8c54 region_type = mapped_file name = "browser.dll" filename = "\\Windows\\System32\\browser.dll" (normalized: "c:\\windows\\system32\\browser.dll") Region: id = 722 start_va = 0x7fef6c00000 end_va = 0x7fef6c3cfff monitored = 0 entry_point = 0x7fef6c01070 region_type = mapped_file name = "srvsvc.dll" filename = "\\Windows\\System32\\srvsvc.dll" (normalized: "c:\\windows\\system32\\srvsvc.dll") Region: id = 723 start_va = 0x7fef6c40000 end_va = 0x7fef6c4dfff monitored = 0 entry_point = 0x7fef6c45500 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 724 start_va = 0x7fef6c50000 end_va = 0x7fef6c76fff monitored = 0 entry_point = 0x7fef6c511a0 region_type = mapped_file name = "ntdsapi.dll" filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll") Region: id = 725 start_va = 0x7fef6c80000 end_va = 0x7fef6d52fff monitored = 0 entry_point = 0x7fef6cf8b00 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 726 start_va = 0x7fef6da0000 end_va = 0x7fef6de6fff monitored = 0 entry_point = 0x7fef6da1040 region_type = mapped_file name = "wdscore.dll" filename = "\\Windows\\System32\\wdscore.dll" (normalized: "c:\\windows\\system32\\wdscore.dll") Region: id = 727 start_va = 0x7fef6df0000 end_va = 0x7fef6e31fff monitored = 0 entry_point = 0x7fef6df17e4 region_type = mapped_file name = "sqmapi.dll" filename = "\\Windows\\System32\\sqmapi.dll" (normalized: "c:\\windows\\system32\\sqmapi.dll") Region: id = 728 start_va = 0x7fef6e40000 end_va = 0x7fef6ed1fff monitored = 0 entry_point = 0x7fef6eb51ec region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 729 start_va = 0x7fef6ee0000 end_va = 0x7fef6f56fff monitored = 0 entry_point = 0x7fef6f1e7f0 region_type = mapped_file name = "wbemcomn2.dll" filename = "\\Windows\\System32\\wbemcomn2.dll" (normalized: "c:\\windows\\system32\\wbemcomn2.dll") Region: id = 730 start_va = 0x7fef6f60000 end_va = 0x7fef6f99fff monitored = 0 entry_point = 0x7fef6f7d020 region_type = mapped_file name = "wmisvc.dll" filename = "\\Windows\\System32\\wbem\\WMIsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wmisvc.dll") Region: id = 731 start_va = 0x7fef6ff0000 end_va = 0x7fef7034fff monitored = 0 entry_point = 0x7fef7023644 region_type = mapped_file name = "upnp.dll" filename = "\\Windows\\System32\\upnp.dll" (normalized: "c:\\windows\\system32\\upnp.dll") Region: id = 732 start_va = 0x7fef7160000 end_va = 0x7fef7171fff monitored = 0 entry_point = 0x7fef71690bc region_type = mapped_file name = "bitsigd.dll" filename = "\\Windows\\System32\\bitsigd.dll" (normalized: "c:\\windows\\system32\\bitsigd.dll") Region: id = 733 start_va = 0x7fef7270000 end_va = 0x7fef7280fff monitored = 0 entry_point = 0x7fef7279e7c region_type = mapped_file name = "ssdpapi.dll" filename = "\\Windows\\System32\\ssdpapi.dll" (normalized: "c:\\windows\\system32\\ssdpapi.dll") Region: id = 734 start_va = 0x7fef7290000 end_va = 0x7fef72f3fff monitored = 0 entry_point = 0x7fef7291254 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 735 start_va = 0x7fef7300000 end_va = 0x7fef7370fff monitored = 0 entry_point = 0x7fef7301010 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 736 start_va = 0x7fef7410000 end_va = 0x7fef7426fff monitored = 0 entry_point = 0x7fef7411060 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll") Region: id = 737 start_va = 0x7fef7430000 end_va = 0x7fef75dffff monitored = 0 entry_point = 0x7fef7431010 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll") Region: id = 738 start_va = 0x7fef85f0000 end_va = 0x7fef8663fff monitored = 0 entry_point = 0x7fef85f66f0 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 739 start_va = 0x7fef9b00000 end_va = 0x7fef9b1afff monitored = 0 entry_point = 0x7fef9b01198 region_type = mapped_file name = "cabinet.dll" filename = "\\Windows\\System32\\cabinet.dll" (normalized: "c:\\windows\\system32\\cabinet.dll") Region: id = 740 start_va = 0x7fef9e90000 end_va = 0x7fef9e98fff monitored = 0 entry_point = 0x7fef9e911a0 region_type = mapped_file name = "tschannel.dll" filename = "\\Windows\\System32\\TSChannel.dll" (normalized: "c:\\windows\\system32\\tschannel.dll") Region: id = 741 start_va = 0x7fefa0a0000 end_va = 0x7fefa116fff monitored = 0 entry_point = 0x7fefa0aafd0 region_type = mapped_file name = "taskcomp.dll" filename = "\\Windows\\System32\\taskcomp.dll" (normalized: "c:\\windows\\system32\\taskcomp.dll") Region: id = 742 start_va = 0x7fefa120000 end_va = 0x7fefa129fff monitored = 0 entry_point = 0x7fefa12260c region_type = mapped_file name = "ktmw32.dll" filename = "\\Windows\\System32\\ktmw32.dll" (normalized: "c:\\windows\\system32\\ktmw32.dll") Region: id = 743 start_va = 0x7fefa130000 end_va = 0x7fefa241fff monitored = 0 entry_point = 0x7fefa14f354 region_type = mapped_file name = "schedsvc.dll" filename = "\\Windows\\System32\\schedsvc.dll" (normalized: "c:\\windows\\system32\\schedsvc.dll") Region: id = 744 start_va = 0x7fefa250000 end_va = 0x7fefa25efff monitored = 0 entry_point = 0x7fefa257e80 region_type = mapped_file name = "wiarpc.dll" filename = "\\Windows\\System32\\wiarpc.dll" (normalized: "c:\\windows\\system32\\wiarpc.dll") Region: id = 745 start_va = 0x7fefa260000 end_va = 0x7fefa268fff monitored = 0 entry_point = 0x7fefa263668 region_type = mapped_file name = "fvecerts.dll" filename = "\\Windows\\System32\\fvecerts.dll" (normalized: "c:\\windows\\system32\\fvecerts.dll") Region: id = 746 start_va = 0x7fefa270000 end_va = 0x7fefa278fff monitored = 0 entry_point = 0x7fefa271020 region_type = mapped_file name = "tbs.dll" filename = "\\Windows\\System32\\tbs.dll" (normalized: "c:\\windows\\system32\\tbs.dll") Region: id = 747 start_va = 0x7fefa280000 end_va = 0x7fefa2d5fff monitored = 0 entry_point = 0x7fefa281040 region_type = mapped_file name = "fveapi.dll" filename = "\\Windows\\System32\\fveapi.dll" (normalized: "c:\\windows\\system32\\fveapi.dll") Region: id = 748 start_va = 0x7fefa2e0000 end_va = 0x7fefa33dfff monitored = 0 entry_point = 0x7fefa2e9024 region_type = mapped_file name = "shsvcs.dll" filename = "\\Windows\\System32\\shsvcs.dll" (normalized: "c:\\windows\\system32\\shsvcs.dll") Region: id = 749 start_va = 0x7fefa340000 end_va = 0x7fefa357fff monitored = 0 entry_point = 0x7fefa341bf8 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 750 start_va = 0x7fefa360000 end_va = 0x7fefa370fff monitored = 0 entry_point = 0x7fefa3616ac region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 751 start_va = 0x7fefa390000 end_va = 0x7fefa3e2fff monitored = 0 entry_point = 0x7fefa392b98 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 752 start_va = 0x7fefa980000 end_va = 0x7fefa993fff monitored = 0 entry_point = 0x7fefa983e64 region_type = mapped_file name = "sens.dll" filename = "\\Windows\\System32\\Sens.dll" (normalized: "c:\\windows\\system32\\sens.dll") Region: id = 753 start_va = 0x7fefa9a0000 end_va = 0x7fefa9aafff monitored = 0 entry_point = 0x7fefa9a1198 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 754 start_va = 0x7fefa9b0000 end_va = 0x7fefa9d6fff monitored = 0 entry_point = 0x7fefa9b98bc region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 755 start_va = 0x7fefa9e0000 end_va = 0x7fefaa46fff monitored = 0 entry_point = 0x7fefa9f6060 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 756 start_va = 0x7fefaa60000 end_va = 0x7fefaa6afff monitored = 0 entry_point = 0x7fefaa64f8c region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll") Region: id = 757 start_va = 0x7fefaa70000 end_va = 0x7fefaa7bfff monitored = 0 entry_point = 0x7fefaa715d8 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 758 start_va = 0x7fefaa80000 end_va = 0x7fefaa8ffff monitored = 0 entry_point = 0x7fefaa8835c region_type = mapped_file name = "themeservice.dll" filename = "\\Windows\\System32\\themeservice.dll" (normalized: "c:\\windows\\system32\\themeservice.dll") Region: id = 759 start_va = 0x7fefaa90000 end_va = 0x7fefaaa8fff monitored = 0 entry_point = 0x7fefaa911a8 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 760 start_va = 0x7fefaab0000 end_va = 0x7fefaae6fff monitored = 0 entry_point = 0x7fefaab8424 region_type = mapped_file name = "profsvc.dll" filename = "\\Windows\\System32\\profsvc.dll" (normalized: "c:\\windows\\system32\\profsvc.dll") Region: id = 761 start_va = 0x7fefab30000 end_va = 0x7fefab44fff monitored = 0 entry_point = 0x7fefab360d8 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 762 start_va = 0x7fefab50000 end_va = 0x7fefac11fff monitored = 0 entry_point = 0x7fefab5101c region_type = mapped_file name = "gpsvc.dll" filename = "\\Windows\\System32\\gpsvc.dll" (normalized: "c:\\windows\\system32\\gpsvc.dll") Region: id = 763 start_va = 0x7fefae50000 end_va = 0x7fefae58fff monitored = 0 entry_point = 0x7fefae51010 region_type = mapped_file name = "avrt.dll" filename = "\\Windows\\System32\\avrt.dll" (normalized: "c:\\windows\\system32\\avrt.dll") Region: id = 764 start_va = 0x7fefaf40000 end_va = 0x7fefaf6cfff monitored = 0 entry_point = 0x7fefaf41010 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 765 start_va = 0x7fefaf70000 end_va = 0x7fefaf80fff monitored = 0 entry_point = 0x7fefaf714c0 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 766 start_va = 0x7fefafd0000 end_va = 0x7fefb040fff monitored = 0 entry_point = 0x7fefb00ecc4 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\System32\\winspool.drv" (normalized: "c:\\windows\\system32\\winspool.drv") Region: id = 767 start_va = 0x7fefb0c0000 end_va = 0x7fefb0d3fff monitored = 0 entry_point = 0x7fefb0c16b4 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 768 start_va = 0x7fefb0e0000 end_va = 0x7fefb0f4fff monitored = 0 entry_point = 0x7fefb0e1050 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 769 start_va = 0x7fefb100000 end_va = 0x7fefb10bfff monitored = 0 entry_point = 0x7fefb1018a4 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 770 start_va = 0x7fefb110000 end_va = 0x7fefb125fff monitored = 0 entry_point = 0x7fefb1111a0 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll") Region: id = 771 start_va = 0x7fefb240000 end_va = 0x7fefb250fff monitored = 0 entry_point = 0x7fefb241070 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 772 start_va = 0x7fefb3a0000 end_va = 0x7fefb3d4fff monitored = 0 entry_point = 0x7fefb3a1064 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 773 start_va = 0x7fefb810000 end_va = 0x7fefb865fff monitored = 0 entry_point = 0x7fefb81bbc0 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 774 start_va = 0x7fefb870000 end_va = 0x7fefb99bfff monitored = 0 entry_point = 0x7fefb8794bc region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 775 start_va = 0x7fefb9a0000 end_va = 0x7fefb9bcfff monitored = 0 entry_point = 0x7fefb9a1ef4 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll") Region: id = 776 start_va = 0x7fefb9f0000 end_va = 0x7fefbbe3fff monitored = 0 entry_point = 0x7fefbb7c924 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 777 start_va = 0x7fefc080000 end_va = 0x7fefc08bfff monitored = 0 entry_point = 0x7fefc081064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 778 start_va = 0x7fefc090000 end_va = 0x7fefc14afff monitored = 0 entry_point = 0x7fefc096de0 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll") Region: id = 779 start_va = 0x7fefc150000 end_va = 0x7fefc156fff monitored = 0 entry_point = 0x7fefc1514b0 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 780 start_va = 0x7fefc240000 end_va = 0x7fefc25afff monitored = 0 entry_point = 0x7fefc242068 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 781 start_va = 0x7fefc260000 end_va = 0x7fefc27dfff monitored = 0 entry_point = 0x7fefc2613b8 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 782 start_va = 0x7fefc280000 end_va = 0x7fefc291fff monitored = 0 entry_point = 0x7fefc281060 region_type = mapped_file name = "devrtl.dll" filename = "\\Windows\\System32\\devrtl.dll" (normalized: "c:\\windows\\system32\\devrtl.dll") Region: id = 783 start_va = 0x7fefc2a0000 end_va = 0x7fefc2befff monitored = 0 entry_point = 0x7fefc2a5c68 region_type = mapped_file name = "spinf.dll" filename = "\\Windows\\System32\\SPInf.dll" (normalized: "c:\\windows\\system32\\spinf.dll") Region: id = 784 start_va = 0x7fefc370000 end_va = 0x7fefc3a8fff monitored = 0 entry_point = 0x7fefc37c0f0 region_type = mapped_file name = "ubpm.dll" filename = "\\Windows\\System32\\ubpm.dll" (normalized: "c:\\windows\\system32\\ubpm.dll") Region: id = 785 start_va = 0x7fefc3b0000 end_va = 0x7fefc3b9fff monitored = 0 entry_point = 0x7fefc3b3cb8 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 786 start_va = 0x7fefc3c0000 end_va = 0x7fefc3ccfff monitored = 0 entry_point = 0x7fefc3c1348 region_type = mapped_file name = "pcwum.dll" filename = "\\Windows\\System32\\pcwum.dll" (normalized: "c:\\windows\\system32\\pcwum.dll") Region: id = 787 start_va = 0x7fefc4b0000 end_va = 0x7fefc4f6fff monitored = 0 entry_point = 0x7fefc4b1064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 788 start_va = 0x7fefc5a0000 end_va = 0x7fefc5cffff monitored = 0 entry_point = 0x7fefc5a194c region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll") Region: id = 789 start_va = 0x7fefc5d0000 end_va = 0x7fefc62afff monitored = 0 entry_point = 0x7fefc5d6940 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 790 start_va = 0x7fefc740000 end_va = 0x7fefc746fff monitored = 0 entry_point = 0x7fefc74142c region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 791 start_va = 0x7fefc750000 end_va = 0x7fefc7a4fff monitored = 0 entry_point = 0x7fefc751054 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 792 start_va = 0x7fefc7b0000 end_va = 0x7fefc7c7fff monitored = 0 entry_point = 0x7fefc7b3b48 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 793 start_va = 0x7fefc8c0000 end_va = 0x7fefc8f1fff monitored = 0 entry_point = 0x7fefc8c144c region_type = mapped_file name = "netjoin.dll" filename = "\\Windows\\System32\\netjoin.dll" (normalized: "c:\\windows\\system32\\netjoin.dll") Region: id = 794 start_va = 0x7fefc900000 end_va = 0x7fefc907fff monitored = 0 entry_point = 0x7fefc902a6c region_type = mapped_file name = "wmsgapi.dll" filename = "\\Windows\\System32\\wmsgapi.dll" (normalized: "c:\\windows\\system32\\wmsgapi.dll") Region: id = 795 start_va = 0x7fefc910000 end_va = 0x7fefc919fff monitored = 0 entry_point = 0x7fefc913b40 region_type = mapped_file name = "sysntfy.dll" filename = "\\Windows\\System32\\sysntfy.dll" (normalized: "c:\\windows\\system32\\sysntfy.dll") Region: id = 796 start_va = 0x7fefc920000 end_va = 0x7fefc941fff monitored = 0 entry_point = 0x7fefc925d30 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 797 start_va = 0x7fefc9a0000 end_va = 0x7fefc9cefff monitored = 0 entry_point = 0x7fefc9a1064 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll") Region: id = 798 start_va = 0x7fefc9e0000 end_va = 0x7fefca4cfff monitored = 0 entry_point = 0x7fefc9e1010 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 799 start_va = 0x7fefca50000 end_va = 0x7fefca63fff monitored = 0 entry_point = 0x7fefca54160 region_type = mapped_file name = "cryptdll.dll" filename = "\\Windows\\System32\\cryptdll.dll" (normalized: "c:\\windows\\system32\\cryptdll.dll") Region: id = 800 start_va = 0x7fefccb0000 end_va = 0x7fefccd2fff monitored = 0 entry_point = 0x7fefccb1198 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 801 start_va = 0x7fefcd50000 end_va = 0x7fefcd5afff monitored = 0 entry_point = 0x7fefcd51030 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 802 start_va = 0x7fefcd80000 end_va = 0x7fefcda4fff monitored = 0 entry_point = 0x7fefcd89658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 803 start_va = 0x7fefcdb0000 end_va = 0x7fefcdbefff monitored = 0 entry_point = 0x7fefcdb1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 804 start_va = 0x7fefcdc0000 end_va = 0x7fefce50fff monitored = 0 entry_point = 0x7fefcdc1440 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 805 start_va = 0x7fefce60000 end_va = 0x7fefce9cfff monitored = 0 entry_point = 0x7fefce618f4 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 806 start_va = 0x7fefcea0000 end_va = 0x7fefceb3fff monitored = 0 entry_point = 0x7fefcea10e0 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 807 start_va = 0x7fefcec0000 end_va = 0x7fefcecefff monitored = 0 entry_point = 0x7fefcec19b0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 808 start_va = 0x7fefcf60000 end_va = 0x7fefcf6efff monitored = 0 entry_point = 0x7fefcf61020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 809 start_va = 0x7fefcf70000 end_va = 0x7fefd0dcfff monitored = 0 entry_point = 0x7fefcf710b4 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 810 start_va = 0x7fefd180000 end_va = 0x7fefd1b5fff monitored = 0 entry_point = 0x7fefd181474 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 811 start_va = 0x7fefd1c0000 end_va = 0x7fefd22bfff monitored = 0 entry_point = 0x7fefd1c2780 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 812 start_va = 0x7fefd230000 end_va = 0x7fefd26afff monitored = 0 entry_point = 0x7fefd231324 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 813 start_va = 0x7fefd270000 end_va = 0x7fefd289fff monitored = 0 entry_point = 0x7fefd271558 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 814 start_va = 0x7fefd310000 end_va = 0x7fefe097fff monitored = 0 entry_point = 0x7fefd38cebc region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 815 start_va = 0x7fefe1d0000 end_va = 0x7fefe2aafff monitored = 0 entry_point = 0x7fefe1f0760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 816 start_va = 0x7fefe2d0000 end_va = 0x7fefe2d7fff monitored = 0 entry_point = 0x7fefe2d1504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 817 start_va = 0x7fefe2e0000 end_va = 0x7fefe331fff monitored = 0 entry_point = 0x7fefe2e10d4 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 818 start_va = 0x7fefe4c0000 end_va = 0x7fefe5ecfff monitored = 0 entry_point = 0x7fefe50ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 819 start_va = 0x7fefe5f0000 end_va = 0x7fefe6c6fff monitored = 0 entry_point = 0x7fefe5f3274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 820 start_va = 0x7fefe770000 end_va = 0x7fefe7d6fff monitored = 0 entry_point = 0x7fefe77b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 821 start_va = 0x7fefe7e0000 end_va = 0x7fefe8a8fff monitored = 0 entry_point = 0x7fefe85a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 822 start_va = 0x7fefe8b0000 end_va = 0x7fefea86fff monitored = 0 entry_point = 0x7fefe8b1010 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 823 start_va = 0x7fefea90000 end_va = 0x7fefeabdfff monitored = 0 entry_point = 0x7fefea91010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 824 start_va = 0x7fefeac0000 end_va = 0x7fefeb30fff monitored = 0 entry_point = 0x7fefead1e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 825 start_va = 0x7fefeb40000 end_va = 0x7fefeb5efff monitored = 0 entry_point = 0x7fefeb460e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 826 start_va = 0x7fefeb60000 end_va = 0x7fefebacfff monitored = 0 entry_point = 0x7fefeb61070 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 827 start_va = 0x7fefebb0000 end_va = 0x7fefebbdfff monitored = 0 entry_point = 0x7fefebb1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 828 start_va = 0x7fefee20000 end_va = 0x7fefef28fff monitored = 0 entry_point = 0x7fefee21064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 829 start_va = 0x7fefef30000 end_va = 0x7feff132fff monitored = 0 entry_point = 0x7fefef53330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 830 start_va = 0x7feff140000 end_va = 0x7feff1defff monitored = 0 entry_point = 0x7feff1425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 831 start_va = 0x7feff1e0000 end_va = 0x7feff278fff monitored = 0 entry_point = 0x7feff1e1c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 832 start_va = 0x7feff290000 end_va = 0x7feff290fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 833 start_va = 0x7fffff48000 end_va = 0x7fffff49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff48000" filename = "" Region: id = 834 start_va = 0x7fffff4a000 end_va = 0x7fffff4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff4a000" filename = "" Region: id = 835 start_va = 0x7fffff4c000 end_va = 0x7fffff4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff4c000" filename = "" Region: id = 836 start_va = 0x7fffff4e000 end_va = 0x7fffff4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff4e000" filename = "" Region: id = 837 start_va = 0x7fffff52000 end_va = 0x7fffff53fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff52000" filename = "" Region: id = 838 start_va = 0x7fffff54000 end_va = 0x7fffff55fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff54000" filename = "" Region: id = 839 start_va = 0x7fffff5e000 end_va = 0x7fffff5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff5e000" filename = "" Region: id = 840 start_va = 0x7fffff64000 end_va = 0x7fffff65fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff64000" filename = "" Region: id = 841 start_va = 0x7fffff66000 end_va = 0x7fffff67fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff66000" filename = "" Region: id = 842 start_va = 0x7fffff6e000 end_va = 0x7fffff6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff6e000" filename = "" Region: id = 843 start_va = 0x7fffff70000 end_va = 0x7fffff71fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff70000" filename = "" Region: id = 844 start_va = 0x7fffff72000 end_va = 0x7fffff73fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff72000" filename = "" Region: id = 845 start_va = 0x7fffff7c000 end_va = 0x7fffff7dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff7c000" filename = "" Region: id = 846 start_va = 0x7fffff80000 end_va = 0x7fffff81fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff80000" filename = "" Region: id = 847 start_va = 0x7fffff86000 end_va = 0x7fffff87fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff86000" filename = "" Region: id = 848 start_va = 0x7fffff8e000 end_va = 0x7fffff8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff8e000" filename = "" Region: id = 849 start_va = 0x7fffff90000 end_va = 0x7fffff91fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff90000" filename = "" Region: id = 850 start_va = 0x7fffff92000 end_va = 0x7fffff93fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff92000" filename = "" Region: id = 851 start_va = 0x7fffff94000 end_va = 0x7fffff95fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff94000" filename = "" Region: id = 852 start_va = 0x7fffff96000 end_va = 0x7fffff97fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff96000" filename = "" Region: id = 853 start_va = 0x7fffff98000 end_va = 0x7fffff99fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff98000" filename = "" Region: id = 854 start_va = 0x7fffff9a000 end_va = 0x7fffff9bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff9a000" filename = "" Region: id = 855 start_va = 0x7fffff9c000 end_va = 0x7fffff9dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff9c000" filename = "" Region: id = 856 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 857 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 858 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 859 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 860 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 861 start_va = 0x7fffffac000 end_va = 0x7fffffadfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 862 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 863 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 864 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 865 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 866 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 867 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 868 start_va = 0x7fffffde000 end_va = 0x7fffffdefff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Thread: id = 12 os_tid = 0xa8c Thread: id = 13 os_tid = 0xffc Thread: id = 14 os_tid = 0xfd4 Thread: id = 15 os_tid = 0xf44 Thread: id = 16 os_tid = 0xf40 Thread: id = 17 os_tid = 0xec4 Thread: id = 18 os_tid = 0xebc Thread: id = 19 os_tid = 0xeb8 Thread: id = 20 os_tid = 0xe44 Thread: id = 21 os_tid = 0x668 Thread: id = 22 os_tid = 0x6c8 Thread: id = 23 os_tid = 0x7fc Thread: id = 24 os_tid = 0x4bc Thread: id = 25 os_tid = 0x310 Thread: id = 26 os_tid = 0x4b8 Thread: id = 27 os_tid = 0x6f4 Thread: id = 28 os_tid = 0x674 Thread: id = 29 os_tid = 0x644 Thread: id = 30 os_tid = 0x634 Thread: id = 31 os_tid = 0x618 Thread: id = 32 os_tid = 0x608 Thread: id = 33 os_tid = 0x5f4 Thread: id = 34 os_tid = 0x454 Thread: id = 35 os_tid = 0x450 Thread: id = 36 os_tid = 0x35c Thread: id = 37 os_tid = 0x130 Thread: id = 38 os_tid = 0x44c Thread: id = 39 os_tid = 0x448 Thread: id = 40 os_tid = 0x43c Thread: id = 41 os_tid = 0x3ec Thread: id = 42 os_tid = 0x3e4 Thread: id = 43 os_tid = 0x3d8 Thread: id = 44 os_tid = 0x36c Thread: id = 45 os_tid = 0x364 Thread: id = 71 os_tid = 0xb00 Process: id = "4" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xab2a000" os_pid = "0x2bc" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "3" os_parent_pid = "0x1c4" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Audiosrv" [0xa], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\lmhosts" [0xa], "NT SERVICE\\WPCSvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000c01e" [0xc000000f], "LOCAL" [0x7] Region: id = 879 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 880 start_va = 0x20000 end_va = 0x20fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\System32\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\svchost.exe.mui") Region: id = 881 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 882 start_va = 0x40000 end_va = 0x40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 883 start_va = 0x50000 end_va = 0xb6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 884 start_va = 0xc0000 end_va = 0xc0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 885 start_va = 0xd0000 end_va = 0xd0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 886 start_va = 0xe0000 end_va = 0xecfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "setupapi.dll.mui" filename = "\\Windows\\System32\\en-US\\setupapi.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\setupapi.dll.mui") Region: id = 887 start_va = 0xf0000 end_va = 0x16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 888 start_va = 0x170000 end_va = 0x18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 889 start_va = 0x190000 end_va = 0x190fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 890 start_va = 0x1a0000 end_va = 0x29ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 891 start_va = 0x2a0000 end_va = 0x2bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002a0000" filename = "" Region: id = 892 start_va = 0x2c0000 end_va = 0x2c0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002c0000" filename = "" Region: id = 893 start_va = 0x2d0000 end_va = 0x2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002d0000" filename = "" Region: id = 894 start_va = 0x2e0000 end_va = 0x3dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002e0000" filename = "" Region: id = 895 start_va = 0x3e0000 end_va = 0x567fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003e0000" filename = "" Region: id = 896 start_va = 0x570000 end_va = 0x6f0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000570000" filename = "" Region: id = 897 start_va = 0x700000 end_va = 0x7bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000700000" filename = "" Region: id = 898 start_va = 0x7c0000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007c0000" filename = "" Region: id = 899 start_va = 0x840000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 900 start_va = 0x860000 end_va = 0x860fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 901 start_va = 0x870000 end_va = 0x877fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 902 start_va = 0x880000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 903 start_va = 0x8c0000 end_va = 0x8c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 904 start_va = 0x8d0000 end_va = 0x8d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008d0000" filename = "" Region: id = 905 start_va = 0x8e0000 end_va = 0x8e0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wshtcpip.dll.mui" filename = "\\Windows\\System32\\en-US\\wshtcpip.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wshtcpip.dll.mui") Region: id = 906 start_va = 0x8f0000 end_va = 0x8f1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008f0000" filename = "" Region: id = 907 start_va = 0x900000 end_va = 0x900fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000900000" filename = "" Region: id = 908 start_va = 0x910000 end_va = 0x911fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000910000" filename = "" Region: id = 909 start_va = 0x920000 end_va = 0x920fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000920000" filename = "" Region: id = 910 start_va = 0x930000 end_va = 0x930fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 911 start_va = 0x9b0000 end_va = 0x9bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000009b0000" filename = "" Region: id = 912 start_va = 0xa00000 end_va = 0xa0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a00000" filename = "" Region: id = 913 start_va = 0xa20000 end_va = 0xa9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a20000" filename = "" Region: id = 914 start_va = 0xb50000 end_va = 0xe1efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 915 start_va = 0xe20000 end_va = 0xf1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e20000" filename = "" Region: id = 916 start_va = 0xf20000 end_va = 0xf9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f20000" filename = "" Region: id = 917 start_va = 0xfe0000 end_va = 0x105ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000fe0000" filename = "" Region: id = 918 start_va = 0x1060000 end_va = 0x10dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001060000" filename = "" Region: id = 919 start_va = 0x10e0000 end_va = 0x1141fff monitored = 0 entry_point = 0x10f08d8 region_type = mapped_file name = "winlogon.exe" filename = "\\Windows\\System32\\winlogon.exe" (normalized: "c:\\windows\\system32\\winlogon.exe") Region: id = 920 start_va = 0x1210000 end_va = 0x128ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001210000" filename = "" Region: id = 921 start_va = 0x12a0000 end_va = 0x131ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012a0000" filename = "" Region: id = 922 start_va = 0x1340000 end_va = 0x13bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001340000" filename = "" Region: id = 923 start_va = 0x13c0000 end_va = 0x14bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000013c0000" filename = "" Region: id = 924 start_va = 0x14c0000 end_va = 0x16bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000014c0000" filename = "" Region: id = 925 start_va = 0x1720000 end_va = 0x179ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001720000" filename = "" Region: id = 926 start_va = 0x17a0000 end_va = 0x181ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000017a0000" filename = "" Region: id = 927 start_va = 0x1850000 end_va = 0x18cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001850000" filename = "" Region: id = 928 start_va = 0x18e0000 end_va = 0x195ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000018e0000" filename = "" Region: id = 929 start_va = 0x19f0000 end_va = 0x1a6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000019f0000" filename = "" Region: id = 930 start_va = 0x1ae0000 end_va = 0x1b5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ae0000" filename = "" Region: id = 931 start_va = 0x1b60000 end_va = 0x1bdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001b60000" filename = "" Region: id = 932 start_va = 0x1be0000 end_va = 0x1fdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001be0000" filename = "" Region: id = 933 start_va = 0x2000000 end_va = 0x207ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002000000" filename = "" Region: id = 934 start_va = 0x2110000 end_va = 0x218ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002110000" filename = "" Region: id = 935 start_va = 0x2380000 end_va = 0x23fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 936 start_va = 0x2400000 end_va = 0x2802fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002400000" filename = "" Region: id = 937 start_va = 0x2810000 end_va = 0x288ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002810000" filename = "" Region: id = 938 start_va = 0x28e0000 end_va = 0x295ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000028e0000" filename = "" Region: id = 939 start_va = 0x2980000 end_va = 0x29fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002980000" filename = "" Region: id = 940 start_va = 0x2b50000 end_va = 0x2bcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b50000" filename = "" Region: id = 941 start_va = 0x2bd0000 end_va = 0x2c4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002bd0000" filename = "" Region: id = 942 start_va = 0x2c50000 end_va = 0x344ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c50000" filename = "" Region: id = 943 start_va = 0x3450000 end_va = 0x354ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003450000" filename = "" Region: id = 944 start_va = 0x76d50000 end_va = 0x76e49fff monitored = 0 entry_point = 0x76d6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 945 start_va = 0x76e50000 end_va = 0x76f6efff monitored = 0 entry_point = 0x76e65340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 946 start_va = 0x76f70000 end_va = 0x77118fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 947 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 948 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 949 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 950 start_va = 0xff720000 end_va = 0xff772fff monitored = 0 entry_point = 0xff733310 region_type = mapped_file name = "services.exe" filename = "\\Windows\\System32\\services.exe" (normalized: "c:\\windows\\system32\\services.exe") Region: id = 951 start_va = 0xff870000 end_va = 0xff87afff monitored = 0 entry_point = 0xff87246c region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 952 start_va = 0xffe50000 end_va = 0xffeb1fff monitored = 0 entry_point = 0xffe608d8 region_type = mapped_file name = "winlogon.exe" filename = "\\Windows\\System32\\winlogon.exe" (normalized: "c:\\windows\\system32\\winlogon.exe") Region: id = 953 start_va = 0x7fef05e0000 end_va = 0x7fef068dfff monitored = 0 entry_point = 0x7fef05e4104 region_type = mapped_file name = "wuapi.dll" filename = "\\Windows\\System32\\wuapi.dll" (normalized: "c:\\windows\\system32\\wuapi.dll") Region: id = 954 start_va = 0x7fef07d0000 end_va = 0x7fef08f4fff monitored = 0 entry_point = 0x7fef0821570 region_type = mapped_file name = "dbghelp.dll" filename = "\\Windows\\System32\\dbghelp.dll" (normalized: "c:\\windows\\system32\\dbghelp.dll") Region: id = 955 start_va = 0x7fef17a0000 end_va = 0x7fef17bbfff monitored = 0 entry_point = 0x7fef17a1060 region_type = mapped_file name = "wscsvc.dll" filename = "\\Windows\\System32\\wscsvc.dll" (normalized: "c:\\windows\\system32\\wscsvc.dll") Region: id = 956 start_va = 0x7fef42b0000 end_va = 0x7fef42fefff monitored = 0 entry_point = 0x7fef42b2760 region_type = mapped_file name = "audioses.dll" filename = "\\Windows\\System32\\AudioSes.dll" (normalized: "c:\\windows\\system32\\audioses.dll") Region: id = 957 start_va = 0x7fef61b0000 end_va = 0x7fef61bafff monitored = 0 entry_point = 0x7fef61b12e0 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll") Region: id = 958 start_va = 0x7fef6210000 end_va = 0x7fef6224fff monitored = 0 entry_point = 0x7fef62112a0 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll") Region: id = 959 start_va = 0x7fef6230000 end_va = 0x7fef6248fff monitored = 0 entry_point = 0x7fef623177c region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll") Region: id = 960 start_va = 0x7fef6670000 end_va = 0x7fef6677fff monitored = 0 entry_point = 0x7fef6671414 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 961 start_va = 0x7fef6960000 end_va = 0x7fef6972fff monitored = 0 entry_point = 0x7fef6961d80 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 962 start_va = 0x7fef6c40000 end_va = 0x7fef6c4dfff monitored = 0 entry_point = 0x7fef6c45500 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 963 start_va = 0x7fef6c50000 end_va = 0x7fef6c76fff monitored = 0 entry_point = 0x7fef6c511a0 region_type = mapped_file name = "ntdsapi.dll" filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll") Region: id = 964 start_va = 0x7fef6c80000 end_va = 0x7fef6d52fff monitored = 0 entry_point = 0x7fef6cf8b00 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 965 start_va = 0x7fef6ee0000 end_va = 0x7fef6f56fff monitored = 0 entry_point = 0x7fef6f1e7f0 region_type = mapped_file name = "wbemcomn2.dll" filename = "\\Windows\\System32\\wbemcomn2.dll" (normalized: "c:\\windows\\system32\\wbemcomn2.dll") Region: id = 966 start_va = 0x7fef9b00000 end_va = 0x7fef9b1afff monitored = 0 entry_point = 0x7fef9b01198 region_type = mapped_file name = "cabinet.dll" filename = "\\Windows\\System32\\cabinet.dll" (normalized: "c:\\windows\\system32\\cabinet.dll") Region: id = 967 start_va = 0x7fefa340000 end_va = 0x7fefa357fff monitored = 0 entry_point = 0x7fefa341bf8 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 968 start_va = 0x7fefa360000 end_va = 0x7fefa370fff monitored = 0 entry_point = 0x7fefa3616ac region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 969 start_va = 0x7fefa390000 end_va = 0x7fefa3e2fff monitored = 0 entry_point = 0x7fefa392b98 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 970 start_va = 0x7fefa420000 end_va = 0x7fefa45afff monitored = 0 entry_point = 0x7fefa424520 region_type = mapped_file name = "dhcpcore6.dll" filename = "\\Windows\\System32\\dhcpcore6.dll" (normalized: "c:\\windows\\system32\\dhcpcore6.dll") Region: id = 971 start_va = 0x7fefa460000 end_va = 0x7fefa4b0fff monitored = 0 entry_point = 0x7fefa46f6c0 region_type = mapped_file name = "dhcpcore.dll" filename = "\\Windows\\System32\\dhcpcore.dll" (normalized: "c:\\windows\\system32\\dhcpcore.dll") Region: id = 972 start_va = 0x7fefa4d0000 end_va = 0x7fefa4d7fff monitored = 0 entry_point = 0x7fefa4d284c region_type = mapped_file name = "nrpsrv.dll" filename = "\\Windows\\System32\\nrpsrv.dll" (normalized: "c:\\windows\\system32\\nrpsrv.dll") Region: id = 973 start_va = 0x7fefa4e0000 end_va = 0x7fefa4e9fff monitored = 0 entry_point = 0x7fefa4e1adc region_type = mapped_file name = "lmhsvc.dll" filename = "\\Windows\\System32\\lmhsvc.dll" (normalized: "c:\\windows\\system32\\lmhsvc.dll") Region: id = 974 start_va = 0x7fefa9a0000 end_va = 0x7fefa9aafff monitored = 0 entry_point = 0x7fefa9a1198 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 975 start_va = 0x7fefa9b0000 end_va = 0x7fefa9d6fff monitored = 0 entry_point = 0x7fefa9b98bc region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 976 start_va = 0x7fefab30000 end_va = 0x7fefab44fff monitored = 0 entry_point = 0x7fefab360d8 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 977 start_va = 0x7fefae50000 end_va = 0x7fefae58fff monitored = 0 entry_point = 0x7fefae51010 region_type = mapped_file name = "avrt.dll" filename = "\\Windows\\System32\\avrt.dll" (normalized: "c:\\windows\\system32\\avrt.dll") Region: id = 978 start_va = 0x7fefae60000 end_va = 0x7fefae8bfff monitored = 0 entry_point = 0x7fefae615c4 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 979 start_va = 0x7fefae90000 end_va = 0x7fefaf3bfff monitored = 0 entry_point = 0x7fefaea6acc region_type = mapped_file name = "audiosrv.dll" filename = "\\Windows\\System32\\audiosrv.dll" (normalized: "c:\\windows\\system32\\audiosrv.dll") Region: id = 980 start_va = 0x7fefaf40000 end_va = 0x7fefaf6cfff monitored = 0 entry_point = 0x7fefaf41010 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 981 start_va = 0x7fefb0e0000 end_va = 0x7fefb0f4fff monitored = 0 entry_point = 0x7fefb0e1050 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 982 start_va = 0x7fefb100000 end_va = 0x7fefb10bfff monitored = 0 entry_point = 0x7fefb1018a4 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 983 start_va = 0x7fefb400000 end_va = 0x7fefb44afff monitored = 0 entry_point = 0x7fefb40efcc region_type = mapped_file name = "mmdevapi.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" (normalized: "c:\\windows\\system32\\mmdevapi.dll") Region: id = 984 start_va = 0x7fefb870000 end_va = 0x7fefb99bfff monitored = 0 entry_point = 0x7fefb8794bc region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 985 start_va = 0x7fefbee0000 end_va = 0x7fefc075fff monitored = 0 entry_point = 0x7fefbee78e4 region_type = mapped_file name = "wevtsvc.dll" filename = "\\Windows\\System32\\wevtsvc.dll" (normalized: "c:\\windows\\system32\\wevtsvc.dll") Region: id = 986 start_va = 0x7fefc080000 end_va = 0x7fefc08bfff monitored = 0 entry_point = 0x7fefc081064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 987 start_va = 0x7fefc090000 end_va = 0x7fefc14afff monitored = 0 entry_point = 0x7fefc096de0 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll") Region: id = 988 start_va = 0x7fefc150000 end_va = 0x7fefc156fff monitored = 0 entry_point = 0x7fefc1514b0 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 989 start_va = 0x7fefc240000 end_va = 0x7fefc25afff monitored = 0 entry_point = 0x7fefc242068 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 990 start_va = 0x7fefc260000 end_va = 0x7fefc27dfff monitored = 0 entry_point = 0x7fefc2613b8 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 991 start_va = 0x7fefc3b0000 end_va = 0x7fefc3b9fff monitored = 0 entry_point = 0x7fefc3b3cb8 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 992 start_va = 0x7fefc4b0000 end_va = 0x7fefc4f6fff monitored = 0 entry_point = 0x7fefc4b1064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 993 start_va = 0x7fefc5d0000 end_va = 0x7fefc62afff monitored = 0 entry_point = 0x7fefc5d6940 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 994 start_va = 0x7fefc740000 end_va = 0x7fefc746fff monitored = 0 entry_point = 0x7fefc74142c region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 995 start_va = 0x7fefc750000 end_va = 0x7fefc7a4fff monitored = 0 entry_point = 0x7fefc751054 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 996 start_va = 0x7fefc7b0000 end_va = 0x7fefc7c7fff monitored = 0 entry_point = 0x7fefc7b3b48 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 997 start_va = 0x7fefc920000 end_va = 0x7fefc941fff monitored = 0 entry_point = 0x7fefc925d30 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 998 start_va = 0x7fefc9e0000 end_va = 0x7fefca4cfff monitored = 0 entry_point = 0x7fefc9e1010 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 999 start_va = 0x7fefcd50000 end_va = 0x7fefcd5afff monitored = 0 entry_point = 0x7fefcd51030 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 1000 start_va = 0x7fefcd80000 end_va = 0x7fefcda4fff monitored = 0 entry_point = 0x7fefcd89658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 1001 start_va = 0x7fefcdb0000 end_va = 0x7fefcdbefff monitored = 0 entry_point = 0x7fefcdb1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 1002 start_va = 0x7fefce60000 end_va = 0x7fefce9cfff monitored = 0 entry_point = 0x7fefce618f4 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 1003 start_va = 0x7fefcea0000 end_va = 0x7fefceb3fff monitored = 0 entry_point = 0x7fefcea10e0 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 1004 start_va = 0x7fefcec0000 end_va = 0x7fefcecefff monitored = 0 entry_point = 0x7fefcec19b0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 1005 start_va = 0x7fefcf60000 end_va = 0x7fefcf6efff monitored = 0 entry_point = 0x7fefcf61020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 1006 start_va = 0x7fefcf70000 end_va = 0x7fefd0dcfff monitored = 0 entry_point = 0x7fefcf710b4 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 1007 start_va = 0x7fefd180000 end_va = 0x7fefd1b5fff monitored = 0 entry_point = 0x7fefd181474 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 1008 start_va = 0x7fefd1c0000 end_va = 0x7fefd22bfff monitored = 0 entry_point = 0x7fefd1c2780 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1009 start_va = 0x7fefd230000 end_va = 0x7fefd26afff monitored = 0 entry_point = 0x7fefd231324 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 1010 start_va = 0x7fefd270000 end_va = 0x7fefd289fff monitored = 0 entry_point = 0x7fefd271558 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 1011 start_va = 0x7fefe1d0000 end_va = 0x7fefe2aafff monitored = 0 entry_point = 0x7fefe1f0760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1012 start_va = 0x7fefe2d0000 end_va = 0x7fefe2d7fff monitored = 0 entry_point = 0x7fefe2d1504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 1013 start_va = 0x7fefe2e0000 end_va = 0x7fefe331fff monitored = 0 entry_point = 0x7fefe2e10d4 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 1014 start_va = 0x7fefe4c0000 end_va = 0x7fefe5ecfff monitored = 0 entry_point = 0x7fefe50ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1015 start_va = 0x7fefe5f0000 end_va = 0x7fefe6c6fff monitored = 0 entry_point = 0x7fefe5f3274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1016 start_va = 0x7fefe770000 end_va = 0x7fefe7d6fff monitored = 0 entry_point = 0x7fefe77b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1017 start_va = 0x7fefe7e0000 end_va = 0x7fefe8a8fff monitored = 0 entry_point = 0x7fefe85a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 1018 start_va = 0x7fefe8b0000 end_va = 0x7fefea86fff monitored = 0 entry_point = 0x7fefe8b1010 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 1019 start_va = 0x7fefea90000 end_va = 0x7fefeabdfff monitored = 0 entry_point = 0x7fefea91010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1020 start_va = 0x7fefeac0000 end_va = 0x7fefeb30fff monitored = 0 entry_point = 0x7fefead1e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 1021 start_va = 0x7fefeb40000 end_va = 0x7fefeb5efff monitored = 0 entry_point = 0x7fefeb460e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1022 start_va = 0x7fefeb60000 end_va = 0x7fefebacfff monitored = 0 entry_point = 0x7fefeb61070 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1023 start_va = 0x7fefebb0000 end_va = 0x7fefebbdfff monitored = 0 entry_point = 0x7fefebb1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 1024 start_va = 0x7fefee20000 end_va = 0x7fefef28fff monitored = 0 entry_point = 0x7fefee21064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 1025 start_va = 0x7fefef30000 end_va = 0x7feff132fff monitored = 0 entry_point = 0x7fefef53330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 1026 start_va = 0x7feff140000 end_va = 0x7feff1defff monitored = 0 entry_point = 0x7feff1425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1027 start_va = 0x7feff1e0000 end_va = 0x7feff278fff monitored = 0 entry_point = 0x7feff1e1c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1028 start_va = 0x7feff290000 end_va = 0x7feff290fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1029 start_va = 0x7fffff88000 end_va = 0x7fffff89fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff88000" filename = "" Region: id = 1030 start_va = 0x7fffff8a000 end_va = 0x7fffff8bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff8a000" filename = "" Region: id = 1031 start_va = 0x7fffff8e000 end_va = 0x7fffff8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff8e000" filename = "" Region: id = 1032 start_va = 0x7fffff90000 end_va = 0x7fffff91fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff90000" filename = "" Region: id = 1033 start_va = 0x7fffff92000 end_va = 0x7fffff93fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff92000" filename = "" Region: id = 1034 start_va = 0x7fffff94000 end_va = 0x7fffff95fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff94000" filename = "" Region: id = 1035 start_va = 0x7fffff96000 end_va = 0x7fffff97fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff96000" filename = "" Region: id = 1036 start_va = 0x7fffff9a000 end_va = 0x7fffff9bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff9a000" filename = "" Region: id = 1037 start_va = 0x7fffff9c000 end_va = 0x7fffff9dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff9c000" filename = "" Region: id = 1038 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 1039 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 1040 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 1041 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 1042 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 1043 start_va = 0x7fffffac000 end_va = 0x7fffffadfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 1044 start_va = 0x7fffffae000 end_va = 0x7fffffaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 1045 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 1046 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 1047 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 1048 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 1049 start_va = 0x7fffffda000 end_va = 0x7fffffdafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 1050 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 1051 start_va = 0x7fffffde000 end_va = 0x7fffffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Thread: id = 48 os_tid = 0xff4 Thread: id = 49 os_tid = 0xe54 Thread: id = 50 os_tid = 0xe40 Thread: id = 51 os_tid = 0x320 Thread: id = 52 os_tid = 0x7c4 Thread: id = 53 os_tid = 0x3b4 Thread: id = 54 os_tid = 0x67c Thread: id = 55 os_tid = 0x624 Thread: id = 56 os_tid = 0x7f4 Thread: id = 57 os_tid = 0x538 Thread: id = 58 os_tid = 0x530 Thread: id = 59 os_tid = 0x524 Thread: id = 60 os_tid = 0x410 Thread: id = 61 os_tid = 0x2a4 Thread: id = 62 os_tid = 0x3b0 Thread: id = 63 os_tid = 0x3a8 Thread: id = 64 os_tid = 0x398 Thread: id = 65 os_tid = 0x2f0 Thread: id = 66 os_tid = 0x2ec Thread: id = 67 os_tid = 0x2c8 Thread: id = 68 os_tid = 0x2c0 Thread: id = 69 os_tid = 0xac8 Thread: id = 70 os_tid = 0xadc