# Flog Txt Version 1 # Analyzer Version: 3.2.2 # Analyzer Build Date: Jun 3 2020 08:38:37 # Log Creation Date: 09.12.2020 10:16:43.369 Process: id = "1" image_name = "vinfk.exe" filename = "c:\\users\\fd1hvy\\desktop\\vinfk.exe" page_root = "0x11d7e000" os_pid = "0x1170" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x560" cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\vinfk.exe\" " cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0x116c [0048.739] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0048.740] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x74bc0000 [0048.740] GetProcAddress (hModule=0x74bc0000, lpProcName="InitializeCriticalSectionEx") returned 0x74cb7060 [0048.740] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x74bc0000 [0048.741] GetProcAddress (hModule=0x74bc0000, lpProcName="FlsAlloc") returned 0x74cbbea0 [0048.741] GetProcAddress (hModule=0x74bc0000, lpProcName="FlsSetValue") returned 0x74cb2550 [0048.742] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x74bc0000 [0048.742] GetProcAddress (hModule=0x74bc0000, lpProcName="InitializeCriticalSectionEx") returned 0x74cb7060 [0048.742] GetProcessHeap () returned 0x420000 [0048.742] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x74bc0000 [0048.742] GetProcAddress (hModule=0x74bc0000, lpProcName="FlsAlloc") returned 0x74cbbea0 [0048.742] GetLastError () returned 0xcb [0048.742] GetProcAddress (hModule=0x74bc0000, lpProcName="FlsGetValue") returned 0x74ca70c0 [0048.742] GetProcAddress (hModule=0x74bc0000, lpProcName="FlsSetValue") returned 0x74cb2550 [0048.742] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x364) returned 0x43b868 [0048.743] SetLastError (dwErrCode=0xcb) [0048.743] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0xe00) returned 0x43bbd8 [0048.837] GetStartupInfoW (in: lpStartupInfo=0x19f794 | out: lpStartupInfo=0x19f794*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\vinfk.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x124a7a0, hStdOutput=0xbfce5040, hStdError=0xfffffffe)) [0048.837] GetStdHandle (nStdHandle=0xfffffff6) returned 0x8c [0048.837] GetFileType (hFile=0x8c) returned 0x2 [0048.837] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0048.837] GetFileType (hFile=0x90) returned 0x2 [0048.837] GetStdHandle (nStdHandle=0xfffffff4) returned 0x94 [0048.837] GetFileType (hFile=0x94) returned 0x2 [0048.838] GetCommandLineA () returned="\"C:\\Users\\FD1HVy\\Desktop\\vinfk.exe\" " [0048.838] GetCommandLineW () returned="\"C:\\Users\\FD1HVy\\Desktop\\vinfk.exe\" " [0048.838] GetACP () returned 0x4e4 [0048.838] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x0, Size=0x220) returned 0x437470 [0048.838] IsValidCodePage (CodePage=0x4e4) returned 1 [0048.838] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19f7b4 | out: lpCPInfo=0x19f7b4) returned 1 [0048.838] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19f07c | out: lpCPInfo=0x19f07c) returned 1 [0048.838] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f690, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0048.838] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f690, cbMultiByte=256, lpWideCharStr=0x19ee18, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0048.838] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x19f090 | out: lpCharType=0x19f090) returned 1 [0048.838] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f690, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0048.838] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f690, cbMultiByte=256, lpWideCharStr=0x19edd8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0048.838] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x74bc0000 [0048.838] GetProcAddress (hModule=0x74bc0000, lpProcName="LCMapStringEx") returned 0x74c9ed00 [0048.838] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0048.838] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x19ebc8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0048.838] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x19f590, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿToò¾Ì÷\x19", lpUsedDefaultChar=0x0) returned 256 [0048.838] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f690, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0048.838] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f690, cbMultiByte=256, lpWideCharStr=0x19ede8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0048.838] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0048.838] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x19ebd8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0048.838] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x19f490, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿToò¾Ì÷\x19", lpUsedDefaultChar=0x0) returned 256 [0048.838] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x0, Size=0x80) returned 0x426610 [0048.839] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x19f5d8, nSize=0x105 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\vinfk.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\vinfk.exe")) returned 0x21 [0048.839] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x772d0000 [0048.839] GetProcAddress (hModule=0x772d0000, lpProcName="AreFileApisANSI") returned 0x772e4280 [0048.839] AreFileApisANSI () returned 1 [0048.839] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\vinfk.exe", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 34 [0048.839] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\vinfk.exe", cchWideChar=-1, lpMultiByteStr=0x1354578, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\Desktop\\vinfk.exe", lpUsedDefaultChar=0x0) returned 34 [0048.839] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x2a) returned 0x42f238 [0048.839] RtlInitializeSListHead (in: ListHead=0x13544a0 | out: ListHead=0x13544a0) [0048.839] GetLastError () returned 0x0 [0048.839] SetLastError (dwErrCode=0x0) [0048.839] GetEnvironmentStringsW () returned 0x439cb0* [0048.839] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0048.839] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x0, Size=0x565) returned 0x43c9e0 [0048.839] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x43c9e0, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0048.839] FreeEnvironmentStringsW (penv=0x439cb0) returned 1 [0048.839] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x94) returned 0x430e68 [0048.839] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x1f) returned 0x42aec0 [0048.839] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x28) returned 0x433040 [0048.839] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x37) returned 0x430f58 [0048.839] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x3c) returned 0x435680 [0048.839] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x31) returned 0x42e938 [0048.839] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x14) returned 0x434e10 [0048.839] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x24) returned 0x433130 [0048.839] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0xd) returned 0x43a9a8 [0048.839] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x17) returned 0x434e70 [0048.839] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x2b) returned 0x42f2a8 [0048.839] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x15) returned 0x434b10 [0048.839] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x17) returned 0x434b50 [0048.839] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x22) returned 0x433190 [0048.840] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0xe) returned 0x43aa68 [0048.840] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0xc1) returned 0x42fc40 [0048.840] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x3e) returned 0x435878 [0048.840] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x1b) returned 0x42ae20 [0048.840] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x1d) returned 0x42ac90 [0048.840] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x48) returned 0x42eb98 [0048.840] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x12) returned 0x434b90 [0048.840] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x18) returned 0x434dd0 [0048.840] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x1b) returned 0x42ae70 [0048.840] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x24) returned 0x433100 [0048.840] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x29) returned 0x42f3c0 [0048.840] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x1e) returned 0x42ae98 [0048.840] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x6b) returned 0x42e0c0 [0048.840] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x17) returned 0x434df0 [0048.840] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0xf) returned 0x43a930 [0048.840] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x16) returned 0x434e90 [0048.840] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x28) returned 0x4330a0 [0048.840] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x27) returned 0x432f80 [0048.840] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x12) returned 0x434b30 [0048.840] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x21) returned 0x433070 [0048.840] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x10) returned 0x43a8a0 [0048.840] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x1c) returned 0x42aee8 [0048.840] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x12) returned 0x434c50 [0048.840] HeapFree (in: hHeap=0x420000, dwFlags=0x0, lpMem=0x43c9e0 | out: hHeap=0x420000) returned 1 [0048.840] GetModuleHandleW (lpModuleName="api-ms-win-core-synch-l1-2-0.dll") returned 0x74bc0000 [0048.840] GetProcAddress (hModule=0x74bc0000, lpProcName="SleepConditionVariableCS") returned 0x74d2fca0 [0048.840] GetProcAddress (hModule=0x74bc0000, lpProcName="WakeAllConditionVariable") returned 0x779d8a90 [0048.841] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x800) returned 0x438ee0 [0048.841] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0048.841] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1249543) returned 0x0 [0048.841] AllocConsole () returned 0 [0048.841] FindWindowA (lpClassName="ConsoleWindowClass", lpWindowName=0x0) returned 0x302d2 [0048.841] ShowWindow (hWnd=0x302d2, nCmdShow=0) returned 1 [0048.907] LoadLibraryExW (lpLibFileName="api-ms-win-core-sysinfo-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x74bc0000 [0048.908] GetProcAddress (hModule=0x74bc0000, lpProcName="GetSystemTimePreciseAsFileTime") returned 0x74c8b830 [0048.908] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x19f558 | out: lpSystemTimeAsFileTime=0x19f558) [0048.908] GetModuleHandleW (lpModuleName=0x0) returned 0x1240000 [0048.908] VirtualProtect (in: lpAddress=0x1240000, dwSize=0x400, flNewProtect=0x40, lpflOldProtect=0x19f5b8 | out: lpflOldProtect=0x19f5b8*=0x2) returned 1 [0048.909] VirtualProtect (in: lpAddress=0x1240000, dwSize=0x400, flNewProtect=0x2, lpflOldProtect=0x19f5b8 | out: lpflOldProtect=0x19f5b8*=0x40) returned 1 [0048.909] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x19f578 | out: lpSystemTimeAsFileTime=0x19f578) [0048.909] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x19f618, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\vinfk.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\vinfk.exe")) returned 0x21 [0048.909] GetSystemWow64DirectoryA (in: lpBuffer=0x19f4ac, uSize=0x104 | out: lpBuffer="C:\\WINDOWS\\SysWOW64") returned 0x13 [0048.909] FindFirstFileA (in: lpFileName="", lpFindFileData=0x19f268 | out: lpFindFileData=0x19f268*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x77990331, ftLastAccessTime.dwLowDateTime=0x19f2f0, ftLastAccessTime.dwHighDateTime=0x11, ftLastWriteTime.dwLowDateTime=0x1, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x5a, dwReserved0=0x4227b8, dwReserved1=0xffffffff, cFileName="", cAlternateFileName="ýW\x9dw")) returned 0xffffffff [0048.909] GetLastError () returned 0x3 [0048.909] GetSystemDirectoryA (in: lpBuffer=0x19f4a8, uSize=0x104 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0048.909] FindFirstFileA (in: lpFileName="", lpFindFileData=0x19f264 | out: lpFindFileData=0x19f264*(dwFileAttributes=0x1242ff2, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x77990331, ftLastAccessTime.dwHighDateTime=0x19f2f0, ftLastWriteTime.dwLowDateTime=0x11, ftLastWriteTime.dwHighDateTime=0x1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5a, dwReserved1=0x4227b8, cFileName="ÿÿÿÿ", cAlternateFileName="")) returned 0xffffffff [0048.909] GetLastError () returned 0x3 [0048.909] GetCurrentProcess () returned 0xffffffff [0048.909] VirtualAllocExNuma (hProcess=0xffffffff, lpAddress=0x0, dwSize=0x3e8, flAllocationType=0x3000, flProtect=0x40, nndPreferred=0x0) returned 0x1e0000 [0048.910] GetModuleHandleW (lpModuleName="oppai.exe") returned 0x0 [0048.910] GetProcAddress (hModule=0x0, lpProcName="") returned 0x0 [0048.910] GetModuleHandleW (lpModuleName=0x0) returned 0x1240000 [0048.910] VirtualProtect (in: lpAddress=0x1240000, dwSize=0x1000, flNewProtect=0x4, lpflOldProtect=0x19f5bc | out: lpflOldProtect=0x19f5bc*=0x2) returned 1 [0048.910] WaitForSingleObject (hHandle=0x7733ea10, dwMilliseconds=0xffffffff) returned 0xffffffff [0048.911] SetConsoleMode (hConsoleHandle=0x7733ea10, dwMode=0x1) returned 0 [0048.911] SetConsoleMode (hConsoleHandle=0x7733ea10, dwMode=0x3) returned 0 [0048.912] SetConsoleMode (hConsoleHandle=0x7733ea10, dwMode=0x3) returned 0 [0048.912] SetConsoleMode (hConsoleHandle=0x7733ea10, dwMode=0x7) returned 0 [0048.913] SetConsoleMode (hConsoleHandle=0x7733ea10, dwMode=0x600) returned 0 [0048.913] SetPriorityClass (hProcess=0x7733ea10, dwPriorityClass=0x59) returned 0 [0048.913] SetPriorityClass (hProcess=0x7733ea10, dwPriorityClass=0x2dd01c) returned 0 [0048.913] SetPriorityClass (hProcess=0x7733ea10, dwPriorityClass=0x8) returned 0 [0048.914] SetPriorityClass (hProcess=0x7733ea10, dwPriorityClass=0x1) returned 0 [0048.915] SetPriorityClass (hProcess=0x7733ea10, dwPriorityClass=0x4) returned 0 [0048.915] SetPriorityClass (hProcess=0x7733ea10, dwPriorityClass=0x1) returned 0 [0048.915] SetPriorityClass (hProcess=0x7733ea10, dwPriorityClass=0x10) returned 0 [0048.915] SetPriorityClass (hProcess=0x7733ea10, dwPriorityClass=0x40) returned 0 [0048.916] SetPriorityClass (hProcess=0x7733ea10, dwPriorityClass=0x80) returned 0 [0048.916] SetPriorityClass (hProcess=0x7733ea10, dwPriorityClass=0x6) returned 0 [0048.916] SetPriorityClass (hProcess=0x7733ea10, dwPriorityClass=0x1) returned 0 [0048.916] SetPriorityClass (hProcess=0x7733ea10, dwPriorityClass=0x400) returned 0 [0048.918] SetPriorityClass (hProcess=0x7733ea10, dwPriorityClass=0xf01ff) returned 0 [0048.918] SetPriorityClass (hProcess=0x7733ea10, dwPriorityClass=0x1) returned 0 [0048.919] SetPriorityClass (hProcess=0x7733ea10, dwPriorityClass=0x1) returned 0 [0048.919] SetPriorityClass (hProcess=0x7733ea10, dwPriorityClass=0x100) returned 0 [0048.920] SetPriorityClass (hProcess=0x7733ea10, dwPriorityClass=0x12) returned 0 [0048.923] SetPriorityClass (hProcess=0x7733ea10, dwPriorityClass=0x8) returned 0 [0048.923] SetPriorityClass (hProcess=0x7733ea10, dwPriorityClass=0x10) returned 0 [0048.923] SetPriorityClass (hProcess=0x7733ea10, dwPriorityClass=0x1) returned 0 [0048.924] SetPriorityClass (hProcess=0x7733ea10, dwPriorityClass=0x2) returned 0 [0048.924] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x19f0d8 | out: lpSystemTimeAsFileTime=0x19f0d8) [0048.924] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x19f1b8, nSize=0x400 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\vinfk.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\vinfk.exe")) returned 0x21 [0048.924] CreateProcessA (in: lpApplicationName="C:\\Users\\FD1HVy\\Desktop\\vinfk.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x19f170*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x19f150 | out: lpCommandLine=0x0, lpProcessInformation=0x19f150*(hProcess=0x164, hThread=0x168, dwProcessId=0xfe4, dwThreadId=0x520)) returned 1 [0048.944] VirtualAlloc (lpAddress=0x0, dwSize=0x4, flAllocationType=0x1000, flProtect=0x4) returned 0x1f0000 [0048.945] GetThreadContext (in: hThread=0x168, lpContext=0x1f0000 | out: lpContext=0x1f0000*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0xf68000, Edx=0x0, Ecx=0x0, Eax=0x12492a4, Ebp=0x0, Eip=0x779e4210, SegCs=0x23, EFlags=0x202, Esp=0x10ff8cc, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0048.952] ReadProcessMemory (in: hProcess=0x164, lpBaseAddress=0xf68008, lpBuffer=0x19f16c, nSize=0x4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x19f16c*, lpNumberOfBytesRead=0x0) returned 1 [0048.952] VirtualAllocEx (hProcess=0x164, lpAddress=0x400000, dwSize=0xfb000, flAllocationType=0x3000, flProtect=0x40) returned 0x400000 [0049.067] WriteProcessMemory (in: hProcess=0x164, lpBaseAddress=0x400000, lpBuffer=0x125e890*, nSize=0x400, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x125e890*, lpNumberOfBytesWritten=0x0) returned 1 [0049.090] WriteProcessMemory (in: hProcess=0x164, lpBaseAddress=0x401000, lpBuffer=0x125ec90*, nSize=0x97400, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x125ec90*, lpNumberOfBytesWritten=0x0) returned 1 [0049.377] WriteProcessMemory (in: hProcess=0x164, lpBaseAddress=0x499000, lpBuffer=0x12f6090*, nSize=0x36600, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x12f6090*, lpNumberOfBytesWritten=0x0) returned 1 [0049.395] WriteProcessMemory (in: hProcess=0x164, lpBaseAddress=0x4d0000, lpBuffer=0x132c690*, nSize=0x1f800, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x132c690*, lpNumberOfBytesWritten=0x0) returned 1 [0049.460] WriteProcessMemory (in: hProcess=0x164, lpBaseAddress=0x4f2000, lpBuffer=0x134be90*, nSize=0x200, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x134be90*, lpNumberOfBytesWritten=0x0) returned 1 [0049.474] WriteProcessMemory (in: hProcess=0x164, lpBaseAddress=0x4f3000, lpBuffer=0x134c090*, nSize=0x8000, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x134c090*, lpNumberOfBytesWritten=0x0) returned 1 [0049.489] WriteProcessMemory (in: hProcess=0x164, lpBaseAddress=0xf68008, lpBuffer=0x125e9c4*, nSize=0x4, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x125e9c4*, lpNumberOfBytesWritten=0x0) returned 1 [0049.489] SetThreadContext (hThread=0x168, lpContext=0x1f0000*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0xf68000, Edx=0x0, Ecx=0x0, Eax=0x464714, Ebp=0x0, Eip=0x779e4210, SegCs=0x23, EFlags=0x202, Esp=0x10ff8cc, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0049.514] ResumeThread (hThread=0x168) returned 0x1 [0049.546] WaitForSingleObject (hHandle=0x7733ea10, dwMilliseconds=0xffffffff) returned 0xffffffff [0049.546] SuspendThread (hThread=0x168) returned 0x0 [0049.546] ResumeThread (hThread=0x168) returned 0x1 [0049.546] GetSystemTimePreciseAsFileTime (in: lpSystemTimeAsFileTime=0x19f0a0 | out: lpSystemTimeAsFileTime=0x19f0a0) [0049.546] GetModuleHandleW (lpModuleName=0x0) returned 0x1240000 [0049.547] ExitProcess (uExitCode=0x0) [0049.547] HeapFree (in: hHeap=0x420000, dwFlags=0x0, lpMem=0x43b868 | out: hHeap=0x420000) returned 1 Thread: id = 7 os_tid = 0xfa8 Process: id = "2" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x1373a000" os_pid = "0x11d0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x1170" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 2 os_tid = 0x11cc Thread: id = 3 os_tid = 0x11d4 Thread: id = 4 os_tid = 0x113c Thread: id = 5 os_tid = 0xe70 Thread: id = 6 os_tid = 0x12cc Thread: id = 16 os_tid = 0xf84 Thread: id = 17 os_tid = 0xef4 Process: id = "3" image_name = "vinfk.exe" filename = "c:\\users\\fd1hvy\\desktop\\vinfk.exe" page_root = "0x17315000" os_pid = "0xfe4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x1170" cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\vinfk.exe\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 8 os_tid = 0x520 [0051.453] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0051.472] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x74bc0000 [0051.473] GetProcAddress (hModule=0x74bc0000, lpProcName="InitializeCriticalSectionEx") returned 0x74cb7060 [0051.486] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x74bc0000 [0051.486] GetProcAddress (hModule=0x74bc0000, lpProcName="FlsAlloc") returned 0x74cbbea0 [0051.487] GetProcAddress (hModule=0x74bc0000, lpProcName="FlsSetValue") returned 0x74cb2550 [0051.619] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x74bc0000 [0051.619] GetProcAddress (hModule=0x74bc0000, lpProcName="InitializeCriticalSectionEx") returned 0x74cb7060 [0051.620] GetProcessHeap () returned 0x570000 [0051.635] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x74bc0000 [0051.635] GetProcAddress (hModule=0x74bc0000, lpProcName="FlsAlloc") returned 0x74cbbea0 [0051.635] GetLastError () returned 0x0 [0051.635] GetProcAddress (hModule=0x74bc0000, lpProcName="FlsGetValue") returned 0x74ca70c0 [0051.635] GetProcAddress (hModule=0x74bc0000, lpProcName="FlsSetValue") returned 0x74cb2550 [0051.651] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x364) returned 0x586128 [0051.680] SetLastError (dwErrCode=0x0) [0051.694] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xe00) returned 0x586498 [0051.696] GetStartupInfoW (in: lpStartupInfo=0x10ff778 | out: lpStartupInfo=0x10ff778*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\vinfk.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x465740, hStdOutput=0x9888a71d, hStdError=0xfffffffe)) [0051.696] GetStdHandle (nStdHandle=0xfffffff6) returned 0x8 [0051.696] GetFileType (hFile=0x8) returned 0x2 [0051.696] GetStdHandle (nStdHandle=0xfffffff5) returned 0xc [0051.696] GetFileType (hFile=0xc) returned 0x2 [0051.696] GetStdHandle (nStdHandle=0xfffffff4) returned 0x10 [0051.696] GetFileType (hFile=0x10) returned 0x2 [0051.696] GetCommandLineA () returned="\"C:\\Users\\FD1HVy\\Desktop\\vinfk.exe\"" [0051.696] GetCommandLineW () returned="\"C:\\Users\\FD1HVy\\Desktop\\vinfk.exe\"" [0051.696] GetACP () returned 0x4e4 [0051.712] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x220) returned 0x5872a0 [0051.712] IsValidCodePage (CodePage=0x4e4) returned 1 [0051.712] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x10ff798 | out: lpCPInfo=0x10ff798) returned 1 [0051.729] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x10ff060 | out: lpCPInfo=0x10ff060) returned 1 [0051.733] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x10ff674, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0051.733] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x10ff674, cbMultiByte=256, lpWideCharStr=0x10fee08, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0051.734] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x10ff074 | out: lpCharType=0x10ff074) returned 1 [0051.738] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x10ff674, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0051.738] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x10ff674, cbMultiByte=256, lpWideCharStr=0x10fedb8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ偆HĀ") returned 256 [0051.738] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x74bc0000 [0051.738] GetProcAddress (hModule=0x74bc0000, lpProcName="LCMapStringEx") returned 0x74c9ed00 [0051.738] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ偆HĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0051.738] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ偆HĀ", cchSrc=256, lpDestStr=0x10feba8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0051.738] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x10ff574, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ}´Ë\x99°÷\x0f\x01L\x84H", lpUsedDefaultChar=0x0) returned 256 [0051.738] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x10ff674, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0051.738] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x10ff674, cbMultiByte=256, lpWideCharStr=0x10fedd8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0051.738] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0051.738] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x10febc8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0051.738] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x10ff474, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ}´Ë\x99°÷\x0f\x01L\x84H", lpUsedDefaultChar=0x0) returned 256 [0051.756] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x80) returned 0x5754f0 [0051.756] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x10ff5bc, nSize=0x105 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\vinfk.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\vinfk.exe")) returned 0x21 [0051.757] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x772d0000 [0051.757] GetProcAddress (hModule=0x772d0000, lpProcName="AreFileApisANSI") returned 0x772e4280 [0051.757] AreFileApisANSI () returned 1 [0051.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\vinfk.exe", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 34 [0051.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\vinfk.exe", cchWideChar=-1, lpMultiByteStr=0x4f1110, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\Desktop\\vinfk.exe", lpUsedDefaultChar=0x0) returned 34 [0051.757] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2a) returned 0x579ba8 [0051.757] RtlInitializeSListHead (in: ListHead=0x4f0b70 | out: ListHead=0x4f0b70) [0051.770] GetLastError () returned 0x0 [0051.770] SetLastError (dwErrCode=0x0) [0051.770] GetEnvironmentStringsW () returned 0x5874c8* [0051.770] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0051.770] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x565) returned 0x587fa0 [0051.771] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x587fa0, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0051.771] FreeEnvironmentStringsW (penv=0x5874c8) returned 1 [0051.771] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x94) returned 0x574eb8 [0051.771] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1f) returned 0x5752c8 [0051.771] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x28) returned 0x580c38 [0051.771] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x37) returned 0x583b30 [0051.773] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3c) returned 0x57fdc0 [0051.773] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x31) returned 0x5838b0 [0051.773] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x14) returned 0x5816d0 [0051.773] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x24) returned 0x580a58 [0051.773] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xd) returned 0x57bb58 [0051.773] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x17) returned 0x581610 [0051.773] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2b) returned 0x579c50 [0051.773] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x15) returned 0x581470 [0051.773] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x17) returned 0x5813f0 [0051.773] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x22) returned 0x580cf8 [0051.773] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xe) returned 0x57ba50 [0051.773] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc1) returned 0x57c090 [0051.773] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3e) returned 0x580000 [0051.773] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1b) returned 0x57c1c0 [0051.773] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1d) returned 0x57c1e8 [0051.773] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x48) returned 0x579378 [0051.773] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x12) returned 0x581390 [0051.773] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x18) returned 0x581570 [0051.773] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1b) returned 0x5760e0 [0051.774] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x24) returned 0x580a28 [0051.774] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x29) returned 0x579c88 [0051.774] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x576108 [0051.774] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x6b) returned 0x579138 [0051.774] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x17) returned 0x581670 [0051.774] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xf) returned 0x57ba68 [0051.774] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x16) returned 0x5816b0 [0051.774] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x28) returned 0x580a88 [0051.774] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x27) returned 0x580c68 [0051.774] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x12) returned 0x581630 [0051.774] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x21) returned 0x580b48 [0051.774] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10) returned 0x57b978 [0051.774] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1c) returned 0x575e90 [0051.774] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x12) returned 0x5813b0 [0051.774] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x587fa0 | out: hHeap=0x570000) returned 1 [0051.801] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x772d0000 [0051.801] GetProcAddress (hModule=0x772d0000, lpProcName="FlsAlloc") returned 0x772e4ae0 [0051.801] GetProcAddress (hModule=0x772d0000, lpProcName="FlsFree") returned 0x772e4b00 [0051.802] GetProcAddress (hModule=0x772d0000, lpProcName="FlsGetValue") returned 0x772e4b20 [0051.802] GetProcAddress (hModule=0x772d0000, lpProcName="FlsSetValue") returned 0x772e4b40 [0051.802] GetProcAddress (hModule=0x772d0000, lpProcName="InitializeCriticalSectionEx") returned 0x7733ebc0 [0051.802] GetProcAddress (hModule=0x772d0000, lpProcName="InitOnceExecuteOnce") returned 0x74cb5550 [0051.802] GetProcAddress (hModule=0x772d0000, lpProcName="CreateEventExW") returned 0x7733eb20 [0051.802] GetProcAddress (hModule=0x772d0000, lpProcName="CreateSemaphoreW") returned 0x7733eb90 [0051.802] GetProcAddress (hModule=0x772d0000, lpProcName="CreateSemaphoreExW") returned 0x7733eb80 [0051.802] GetProcAddress (hModule=0x772d0000, lpProcName="CreateThreadpoolTimer") returned 0x772e6d30 [0051.802] GetProcAddress (hModule=0x772d0000, lpProcName="SetThreadpoolTimer") returned 0x779bd7c0 [0051.802] GetProcAddress (hModule=0x772d0000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x779bb840 [0051.802] GetProcAddress (hModule=0x772d0000, lpProcName="CloseThreadpoolTimer") returned 0x779bb740 [0051.803] GetProcAddress (hModule=0x772d0000, lpProcName="CreateThreadpoolWait") returned 0x772e6d70 [0051.803] GetProcAddress (hModule=0x772d0000, lpProcName="SetThreadpoolWait") returned 0x779bc0b0 [0051.803] GetProcAddress (hModule=0x772d0000, lpProcName="CloseThreadpoolWait") returned 0x779bbe10 [0051.803] GetProcAddress (hModule=0x772d0000, lpProcName="FlushProcessWriteBuffers") returned 0x779e2b20 [0051.803] GetProcAddress (hModule=0x772d0000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x779d8e50 [0051.803] GetProcAddress (hModule=0x772d0000, lpProcName="GetCurrentProcessorNumber") returned 0x779d52f0 [0051.803] GetProcAddress (hModule=0x772d0000, lpProcName="CreateSymbolicLinkW") returned 0x772e4510 [0051.803] GetProcAddress (hModule=0x772d0000, lpProcName="GetCurrentPackageId") returned 0x74cbe260 [0051.803] GetProcAddress (hModule=0x772d0000, lpProcName="GetTickCount64") returned 0x772e0db0 [0051.803] GetProcAddress (hModule=0x772d0000, lpProcName="GetFileInformationByHandleEx") returned 0x772e43d0 [0051.803] GetProcAddress (hModule=0x772d0000, lpProcName="SetFileInformationByHandle") returned 0x7733f110 [0051.803] GetProcAddress (hModule=0x772d0000, lpProcName="GetSystemTimePreciseAsFileTime") returned 0x7733f1e0 [0051.804] GetProcAddress (hModule=0x772d0000, lpProcName="InitializeConditionVariable") returned 0x779d3a00 [0051.804] GetProcAddress (hModule=0x772d0000, lpProcName="WakeConditionVariable") returned 0x77a48c50 [0051.804] GetProcAddress (hModule=0x772d0000, lpProcName="WakeAllConditionVariable") returned 0x779d8a90 [0051.804] GetProcAddress (hModule=0x772d0000, lpProcName="SleepConditionVariableCS") returned 0x74d2fca0 [0051.804] GetProcAddress (hModule=0x772d0000, lpProcName="InitializeSRWLock") returned 0x779d3a00 [0051.804] GetProcAddress (hModule=0x772d0000, lpProcName="AcquireSRWLockExclusive") returned 0x779b58e0 [0051.804] GetProcAddress (hModule=0x772d0000, lpProcName="TryAcquireSRWLockExclusive") returned 0x77a32ce0 [0051.804] GetProcAddress (hModule=0x772d0000, lpProcName="ReleaseSRWLockExclusive") returned 0x779b83a0 [0051.804] GetProcAddress (hModule=0x772d0000, lpProcName="SleepConditionVariableSRW") returned 0x74d2fcf0 [0051.804] GetProcAddress (hModule=0x772d0000, lpProcName="CreateThreadpoolWork") returned 0x772e6db0 [0051.804] GetProcAddress (hModule=0x772d0000, lpProcName="SubmitThreadpoolWork") returned 0x779beb00 [0051.804] GetProcAddress (hModule=0x772d0000, lpProcName="CloseThreadpoolWork") returned 0x779bed50 [0051.805] GetProcAddress (hModule=0x772d0000, lpProcName="CompareStringEx") returned 0x772e7050 [0051.805] GetProcAddress (hModule=0x772d0000, lpProcName="GetLocaleInfoEx") returned 0x772e7190 [0051.805] GetProcAddress (hModule=0x772d0000, lpProcName="LCMapStringEx") returned 0x772e7480 [0051.805] GetModuleHandleW (lpModuleName="api-ms-win-core-synch-l1-2-0.dll") returned 0x74bc0000 [0051.805] GetProcAddress (hModule=0x74bc0000, lpProcName="SleepConditionVariableCS") returned 0x74d2fca0 [0051.805] GetProcAddress (hModule=0x74bc0000, lpProcName="WakeAllConditionVariable") returned 0x779d8a90 [0051.805] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x800) returned 0x5874c8 [0051.805] QueryPerformanceFrequency (in: lpFrequency=0x10ff800 | out: lpFrequency=0x10ff800*=100000000) returned 1 [0051.805] QueryPerformanceCounter (in: lpPerformanceCount=0x10ff7f8 | out: lpPerformanceCount=0x10ff7f8*=14754103511) returned 1 [0051.821] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0051.835] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x465169) returned 0x0 [0051.905] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1b) returned 0x575eb8 [0051.905] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1b) returned 0x5881b8 [0051.905] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1b) returned 0x5884b0 [0051.922] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x4) returned 0x57f320 [0051.954] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1b) returned 0x5884d8 [0051.954] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1b) returned 0x5882a8 [0051.954] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x50) returned 0x575758 [0051.970] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x70) returned 0x57b590 [0051.983] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x30) returned 0x5887f0 [0051.987] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x5882f8 [0051.987] CryptAcquireContextA (in: phProv=0x10ff5dc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x10ff5dc*=0x574c58) returned 1 [0052.332] RtlWakeAllConditionVariable (in: ConditionVariable=0x4f0b78 | out: ConditionVariable=0x4f0b78) [0052.333] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x4) returned 0x57f340 [0052.333] CryptAcquireContextA (in: phProv=0x57f340, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x57f340*=0x575f08) returned 1 [0052.333] CryptGenRandom (in: hProv=0x575f08, dwLen=0x20, pbBuffer=0x5882f8 | out: pbBuffer=0x5882f8) returned 1 [0052.333] CryptReleaseContext (hProv=0x574c58, dwFlags=0x0) returned 1 [0052.348] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5882f8 | out: hHeap=0x570000) returned 1 [0052.357] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x120c) returned 0x589158 [0052.357] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x103) returned 0x57b428 [0052.357] QueryPerformanceCounter (in: lpPerformanceCount=0x10ff548 | out: lpPerformanceCount=0x10ff548*=14809284384) returned 1 [0052.357] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x10ff5ac | out: lpSystemTimeAsFileTime=0x10ff5ac*(dwLowDateTime=0x81f1426f, dwHighDateTime=0x1d6ce14)) [0052.361] QueryPerformanceCounter (in: lpPerformanceCount=0x10ff548 | out: lpPerformanceCount=0x10ff548*=14809711910) returned 1 [0052.361] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x10ff5ac | out: lpSystemTimeAsFileTime=0x10ff5ac*(dwLowDateTime=0x81f1426f, dwHighDateTime=0x1d6ce14)) [0052.361] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57fd78 [0052.361] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57fe50 [0052.366] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x14) returned 0x5813d0 [0052.366] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x60) returned 0x575c58 [0052.371] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1c) returned 0x5881e0 [0052.371] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x100) returned 0x57b200 [0052.371] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x57f330 [0052.371] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588168 [0052.371] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x57b9d8 [0052.371] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x57f370 [0052.371] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588398 [0052.371] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x57b8b8 [0052.371] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b8b8 | out: hHeap=0x570000) returned 1 [0052.371] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588398 | out: hHeap=0x570000) returned 1 [0052.371] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57f370 | out: hHeap=0x570000) returned 1 [0052.371] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b9d8 | out: hHeap=0x570000) returned 1 [0052.371] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588168 | out: hHeap=0x570000) returned 1 [0052.371] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57f330 | out: hHeap=0x570000) returned 1 [0052.371] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b200 | out: hHeap=0x570000) returned 1 [0052.371] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5881e0 | out: hHeap=0x570000) returned 1 [0052.371] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x575c58 | out: hHeap=0x570000) returned 1 [0052.375] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x14) returned 0x581450 [0052.375] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x14) returned 0x5814d0 [0052.375] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2c) returned 0x5887b8 [0052.375] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2c) returned 0x5886d8 [0052.375] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x14) returned 0x581650 [0052.375] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x14) returned 0x581410 [0052.375] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x57f330 [0052.375] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1) returned 0x57f370 [0052.375] GetLastError () returned 0x0 [0052.376] GetProcAddress (hModule=0x74bc0000, lpProcName="FlsGetValue") returned 0x74ca70c0 [0052.376] SetLastError (dwErrCode=0x0) [0052.376] GetLastError () returned 0x0 [0052.376] SetLastError (dwErrCode=0x0) [0052.376] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581650 | out: hHeap=0x570000) returned 1 [0052.376] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581410 | out: hHeap=0x570000) returned 1 [0052.376] GetLastError () returned 0x0 [0052.376] SetLastError (dwErrCode=0x0) [0052.376] GetLastError () returned 0x0 [0052.376] SetLastError (dwErrCode=0x0) [0052.376] GetLastError () returned 0x0 [0052.376] SetLastError (dwErrCode=0x0) [0052.376] GetLastError () returned 0x0 [0052.376] SetLastError (dwErrCode=0x0) [0052.376] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581450 | out: hHeap=0x570000) returned 1 [0052.376] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5814d0 | out: hHeap=0x570000) returned 1 [0052.376] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5887b8 | out: hHeap=0x570000) returned 1 [0052.376] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5886d8 | out: hHeap=0x570000) returned 1 [0052.398] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x60) returned 0x575c58 [0052.398] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1c) returned 0x588348 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x100) returned 0x57b200 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x57f380 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588460 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x57b8b8 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a730 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588168 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x57bab0 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x50) returned 0x5759b8 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x50) returned 0x57a130 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x57fe98 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x40) returned 0x580048 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x14) returned 0x581530 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x60) returned 0x5799e0 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1c) returned 0x5881e0 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x100) returned 0x58a778 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a620 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588320 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x57b8e8 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a5b0 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588370 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x57bac8 [0052.399] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bac8 | out: hHeap=0x570000) returned 1 [0052.399] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588370 | out: hHeap=0x570000) returned 1 [0052.399] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a5b0 | out: hHeap=0x570000) returned 1 [0052.399] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b8e8 | out: hHeap=0x570000) returned 1 [0052.399] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588320 | out: hHeap=0x570000) returned 1 [0052.399] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a620 | out: hHeap=0x570000) returned 1 [0052.399] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a778 | out: hHeap=0x570000) returned 1 [0052.399] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5881e0 | out: hHeap=0x570000) returned 1 [0052.399] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5799e0 | out: hHeap=0x570000) returned 1 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x14) returned 0x581450 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x14) returned 0x581410 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2c) returned 0x5889e8 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2c) returned 0x588748 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x14) returned 0x581430 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x14) returned 0x581490 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x58a740 [0052.399] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1) returned 0x58a760 [0052.400] GetLastError () returned 0x0 [0052.400] SetLastError (dwErrCode=0x0) [0052.400] GetLastError () returned 0x0 [0052.400] SetLastError (dwErrCode=0x0) [0052.400] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581430 | out: hHeap=0x570000) returned 1 [0052.400] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581490 | out: hHeap=0x570000) returned 1 [0052.400] GetLastError () returned 0x0 [0052.400] SetLastError (dwErrCode=0x0) [0052.400] GetLastError () returned 0x0 [0052.400] SetLastError (dwErrCode=0x0) [0052.400] GetLastError () returned 0x0 [0052.400] SetLastError (dwErrCode=0x0) [0052.400] GetLastError () returned 0x0 [0052.400] SetLastError (dwErrCode=0x0) [0052.400] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581450 | out: hHeap=0x570000) returned 1 [0052.400] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581410 | out: hHeap=0x570000) returned 1 [0052.400] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5889e8 | out: hHeap=0x570000) returned 1 [0052.400] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588748 | out: hHeap=0x570000) returned 1 [0052.400] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x60) returned 0x5799e0 [0052.400] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1c) returned 0x588280 [0052.400] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x100) returned 0x58a778 [0052.400] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a6e0 [0052.400] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588398 [0052.400] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x57b8e8 [0052.400] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a6f0 [0052.400] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588488 [0052.400] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x57b9d8 [0052.400] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x50) returned 0x5791c8 [0052.400] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x50) returned 0x5704a0 [0052.400] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a740 | out: hHeap=0x570000) returned 1 [0052.400] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a760 | out: hHeap=0x570000) returned 1 [0052.400] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581530 | out: hHeap=0x570000) returned 1 [0052.400] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x580048 | out: hHeap=0x570000) returned 1 [0052.400] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57fe98 | out: hHeap=0x570000) returned 1 [0052.400] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b9d8 | out: hHeap=0x570000) returned 1 [0052.401] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588488 | out: hHeap=0x570000) returned 1 [0052.401] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a6f0 | out: hHeap=0x570000) returned 1 [0052.401] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b8e8 | out: hHeap=0x570000) returned 1 [0052.401] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588398 | out: hHeap=0x570000) returned 1 [0052.401] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a6e0 | out: hHeap=0x570000) returned 1 [0052.401] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a778 | out: hHeap=0x570000) returned 1 [0052.401] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588280 | out: hHeap=0x570000) returned 1 [0052.401] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5799e0 | out: hHeap=0x570000) returned 1 [0052.401] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5791c8 | out: hHeap=0x570000) returned 1 [0052.401] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57f330 | out: hHeap=0x570000) returned 1 [0052.401] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57f370 | out: hHeap=0x570000) returned 1 [0052.401] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5813d0 | out: hHeap=0x570000) returned 1 [0052.401] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57fe50 | out: hHeap=0x570000) returned 1 [0052.401] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57fd78 | out: hHeap=0x570000) returned 1 [0052.401] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bab0 | out: hHeap=0x570000) returned 1 [0052.401] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588168 | out: hHeap=0x570000) returned 1 [0052.401] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a730 | out: hHeap=0x570000) returned 1 [0052.401] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b8b8 | out: hHeap=0x570000) returned 1 [0052.401] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588460 | out: hHeap=0x570000) returned 1 [0052.401] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57f380 | out: hHeap=0x570000) returned 1 [0052.401] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b200 | out: hHeap=0x570000) returned 1 [0052.401] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588348 | out: hHeap=0x570000) returned 1 [0052.401] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x575c58 | out: hHeap=0x570000) returned 1 [0052.401] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5759b8 | out: hHeap=0x570000) returned 1 [0052.401] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589158 | out: hHeap=0x570000) returned 1 [0052.401] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0052.401] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5887f0 | out: hHeap=0x570000) returned 1 [0052.401] GetUserNameW (in: lpBuffer=0x10ff5ec, pcbBuffer=0x10ff5e8 | out: lpBuffer="FD1HVy", pcbBuffer=0x10ff5e8) returned 1 [0052.423] LoadLibraryExW (lpLibFileName="api-ms-win-core-string-l1-1-0", hFile=0x0, dwFlags=0x800) returned 0x74bc0000 [0052.423] GetProcAddress (hModule=0x74bc0000, lpProcName="CompareStringEx") returned 0x74c82c20 [0052.423] GetProcAddress (hModule=0x74bc0000, lpProcName="EnumSystemLocalesEx") returned 0x74c83a60 [0052.423] LoadLibraryExW (lpLibFileName="api-ms-win-core-datetime-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x74bc0000 [0052.423] GetProcAddress (hModule=0x74bc0000, lpProcName="GetDateFormatEx") returned 0x74cf9b40 [0052.423] GetProcAddress (hModule=0x74bc0000, lpProcName="GetLocaleInfoEx") returned 0x74caf170 [0052.424] GetProcAddress (hModule=0x74bc0000, lpProcName="GetTimeFormatEx") returned 0x74cf9e10 [0052.424] GetProcAddress (hModule=0x74bc0000, lpProcName="GetUserDefaultLocaleName") returned 0x74cb4220 [0052.424] GetProcAddress (hModule=0x74bc0000, lpProcName="IsValidLocaleName") returned 0x74caed60 [0052.424] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-obsolete-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x74bc0000 [0052.424] GetProcAddress (hModule=0x74bc0000, lpProcName="LCIDToLocaleName") returned 0x74cada50 [0052.424] GetProcAddress (hModule=0x74bc0000, lpProcName="LocaleNameToLCID") returned 0x74c8bac0 [0052.424] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588190 [0052.438] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x57f330 [0052.438] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57f330 | out: hHeap=0x570000) returned 1 [0052.438] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x57f330 [0052.438] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x5834b0 [0052.438] GetLastError () returned 0x0 [0052.438] SetLastError (dwErrCode=0x0) [0052.438] GetLastError () returned 0x0 [0052.438] SetLastError (dwErrCode=0x0) [0052.438] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57bf48 [0052.438] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58bf40 [0052.439] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58bf40 | out: hHeap=0x570000) returned 1 [0052.439] GetLastError () returned 0x0 [0052.439] SetLastError (dwErrCode=0x0) [0052.439] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589d18 [0052.439] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589ea8 [0052.439] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589e08 [0052.439] GetLastError () returned 0x0 [0052.439] SetLastError (dwErrCode=0x0) [0052.439] GetLastError () returned 0x0 [0052.439] SetLastError (dwErrCode=0x0) [0052.439] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57b428 [0052.439] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58bf40 [0052.439] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58bf40 | out: hHeap=0x570000) returned 1 [0052.439] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d18 | out: hHeap=0x570000) returned 1 [0052.439] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bf48 | out: hHeap=0x570000) returned 1 [0052.439] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e08 | out: hHeap=0x570000) returned 1 [0052.439] GetLastError () returned 0x0 [0052.439] SetLastError (dwErrCode=0x0) [0052.439] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589e98 [0052.439] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589d18 [0052.439] GetLastError () returned 0x0 [0052.439] SetLastError (dwErrCode=0x0) [0052.454] GetLastError () returned 0x0 [0052.454] SetLastError (dwErrCode=0x0) [0052.454] GetLastError () returned 0x0 [0052.454] SetLastError (dwErrCode=0x0) [0052.454] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589e48 [0052.454] GetLastError () returned 0x0 [0052.454] SetLastError (dwErrCode=0x0) [0052.454] GetLastError () returned 0x0 [0052.454] SetLastError (dwErrCode=0x0) [0052.454] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57bf48 [0052.454] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58bf40 [0052.455] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58bf40 | out: hHeap=0x570000) returned 1 [0052.455] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e98 | out: hHeap=0x570000) returned 1 [0052.455] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0052.455] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e48 | out: hHeap=0x570000) returned 1 [0052.455] GetLastError () returned 0x0 [0052.455] SetLastError (dwErrCode=0x0) [0052.455] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589e08 [0052.455] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d18 | out: hHeap=0x570000) returned 1 [0052.455] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ea8 | out: hHeap=0x570000) returned 1 [0052.455] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588230 [0052.455] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589da8 [0052.470] GetLastError () returned 0x0 [0052.470] SetLastError (dwErrCode=0x0) [0052.470] GetLastError () returned 0x0 [0052.470] SetLastError (dwErrCode=0x0) [0052.470] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57b428 [0052.470] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58bf40 [0052.470] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58bf40 | out: hHeap=0x570000) returned 1 [0052.470] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e08 | out: hHeap=0x570000) returned 1 [0052.470] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bf48 | out: hHeap=0x570000) returned 1 [0052.470] GetLastError () returned 0x0 [0052.470] SetLastError (dwErrCode=0x0) [0052.470] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589dd8 [0052.470] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589e28 [0052.470] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589d78 [0052.470] GetLastError () returned 0x0 [0052.470] SetLastError (dwErrCode=0x0) [0052.470] GetLastError () returned 0x0 [0052.470] SetLastError (dwErrCode=0x0) [0052.470] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57bf48 [0052.470] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58bf40 [0052.470] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58bf40 | out: hHeap=0x570000) returned 1 [0052.470] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589dd8 | out: hHeap=0x570000) returned 1 [0052.470] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0052.470] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d78 | out: hHeap=0x570000) returned 1 [0052.471] GetLastError () returned 0x0 [0052.471] SetLastError (dwErrCode=0x0) [0052.471] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589de8 [0052.471] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589e38 [0052.471] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5815b0 [0052.471] GetLastError () returned 0x0 [0052.471] SetLastError (dwErrCode=0x0) [0052.471] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58a0f0 [0052.471] GetLastError () returned 0x0 [0052.471] SetLastError (dwErrCode=0x0) [0052.471] GetLastError () returned 0x0 [0052.471] SetLastError (dwErrCode=0x0) [0052.485] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xa0) returned 0x5757d8 [0052.485] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e78 [0052.485] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589db8 [0052.485] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581690 [0052.499] GetLastError () returned 0x0 [0052.499] SetLastError (dwErrCode=0x0) [0052.499] GetLastError () returned 0x0 [0052.499] SetLastError (dwErrCode=0x0) [0052.499] GetLastError () returned 0x0 [0052.499] SetLastError (dwErrCode=0x0) [0052.499] GetLastError () returned 0x0 [0052.499] SetLastError (dwErrCode=0x0) [0052.499] GetLastError () returned 0x0 [0052.499] SetLastError (dwErrCode=0x0) [0052.499] GetLastError () returned 0x0 [0052.499] SetLastError (dwErrCode=0x0) [0052.499] GetLastError () returned 0x0 [0052.499] SetLastError (dwErrCode=0x0) [0052.503] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589d78 [0052.503] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x6) returned 0x589f08 [0052.503] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x5) returned 0x589ee8 [0052.503] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d18 [0052.538] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x57b8b8 [0052.538] GetLastError () returned 0x0 [0052.539] SetLastError (dwErrCode=0x0) [0052.539] GetLastError () returned 0x0 [0052.539] SetLastError (dwErrCode=0x0) [0052.539] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589ef8 [0052.539] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589dc8 [0052.539] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589df8 [0052.539] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x5895c8 [0052.539] GetLastError () returned 0x0 [0052.539] SetLastError (dwErrCode=0x0) [0052.539] GetLastError () returned 0x0 [0052.539] SetLastError (dwErrCode=0x0) [0052.539] GetLastError () returned 0x0 [0052.539] SetLastError (dwErrCode=0x0) [0052.539] GetLastError () returned 0x0 [0052.539] SetLastError (dwErrCode=0x0) [0052.539] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589d28 [0052.559] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e48 [0052.559] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589ec8 [0052.559] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589e08 [0052.564] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589928 [0052.564] GetLastError () returned 0x0 [0052.564] SetLastError (dwErrCode=0x0) [0052.564] GetLastError () returned 0x0 [0052.564] SetLastError (dwErrCode=0x0) [0052.564] GetLastError () returned 0x0 [0052.564] SetLastError (dwErrCode=0x0) [0052.564] GetLastError () returned 0x0 [0052.564] SetLastError (dwErrCode=0x0) [0052.564] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589d38 [0052.564] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589d48 [0052.564] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e98 [0052.564] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589ea8 [0052.564] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c0f8 [0052.564] GetLastError () returned 0x0 [0052.564] SetLastError (dwErrCode=0x0) [0052.564] GetLastError () returned 0x0 [0052.564] SetLastError (dwErrCode=0x0) [0052.564] GetLastError () returned 0x0 [0052.564] SetLastError (dwErrCode=0x0) [0052.702] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x5898c8 [0052.703] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589aa8 [0052.703] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5898c8 | out: hHeap=0x570000) returned 1 [0052.703] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x56) returned 0x589a48 [0052.709] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x574c58 [0052.709] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x57b658 [0052.709] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x574c58 | out: hHeap=0x570000) returned 1 [0052.709] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x87) returned 0x574c58 [0052.709] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xd) returned 0x57bc18 [0052.709] GetLastError () returned 0x0 [0052.709] SetLastError (dwErrCode=0x0) [0052.710] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10ff3a8, cchData=2 | out: lpLCData="0") returned 2 [0052.711] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x579448 [0052.740] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x58c748 [0052.745] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c5f8 [0052.745] GetLastError () returned 0x0 [0052.745] SetLastError (dwErrCode=0x0) [0052.745] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58ba78 [0052.745] GetLastError () returned 0x0 [0052.745] SetLastError (dwErrCode=0x0) [0052.745] GetLastError () returned 0x0 [0052.745] SetLastError (dwErrCode=0x0) [0052.745] GetLastError () returned 0x0 [0052.745] SetLastError (dwErrCode=0x0) [0052.745] GetLastError () returned 0x0 [0052.746] SetLastError (dwErrCode=0x0) [0052.746] GetLastError () returned 0x0 [0052.746] SetLastError (dwErrCode=0x0) [0052.746] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e58 [0052.746] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d58 [0052.746] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581350 [0052.746] GetLastError () returned 0x0 [0052.746] SetLastError (dwErrCode=0x0) [0052.746] GetLastError () returned 0x0 [0052.746] SetLastError (dwErrCode=0x0) [0052.746] GetLastError () returned 0x0 [0052.746] SetLastError (dwErrCode=0x0) [0052.746] GetLastError () returned 0x0 [0052.746] SetLastError (dwErrCode=0x0) [0052.746] GetLastError () returned 0x0 [0052.746] SetLastError (dwErrCode=0x0) [0052.746] GetLastError () returned 0x0 [0052.746] SetLastError (dwErrCode=0x0) [0052.746] GetLastError () returned 0x0 [0052.746] SetLastError (dwErrCode=0x0) [0052.746] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589dd8 [0052.746] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x579430 [0052.746] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x579538 [0052.747] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x5794d8 [0052.747] GetLastError () returned 0x0 [0052.747] SetLastError (dwErrCode=0x0) [0052.747] GetLastError () returned 0x0 [0052.747] SetLastError (dwErrCode=0x0) [0052.747] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d68 [0052.747] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d98 [0052.747] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589eb8 [0052.747] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589628 [0052.747] GetLastError () returned 0x0 [0052.747] SetLastError (dwErrCode=0x0) [0052.747] GetLastError () returned 0x0 [0052.747] SetLastError (dwErrCode=0x0) [0052.747] GetLastError () returned 0x0 [0052.747] SetLastError (dwErrCode=0x0) [0052.747] GetLastError () returned 0x0 [0052.747] SetLastError (dwErrCode=0x0) [0052.747] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e68 [0052.747] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d88 [0052.747] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589e18 [0052.747] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589ed8 [0052.748] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589568 [0052.748] GetLastError () returned 0x0 [0052.748] SetLastError (dwErrCode=0x0) [0052.748] GetLastError () returned 0x0 [0052.748] SetLastError (dwErrCode=0x0) [0052.748] GetLastError () returned 0x0 [0052.748] SetLastError (dwErrCode=0x0) [0052.748] GetLastError () returned 0x0 [0052.748] SetLastError (dwErrCode=0x0) [0052.748] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e88 [0052.748] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589fc8 [0052.748] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589fe8 [0052.748] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589f28 [0052.748] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c238 [0052.748] GetLastError () returned 0x0 [0052.748] SetLastError (dwErrCode=0x0) [0052.748] GetLastError () returned 0x0 [0052.748] SetLastError (dwErrCode=0x0) [0052.748] GetLastError () returned 0x0 [0052.748] SetLastError (dwErrCode=0x0) [0052.790] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x579f68 [0052.792] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x57b428 [0052.792] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579f68 | out: hHeap=0x570000) returned 1 [0052.792] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xac) returned 0x579f68 [0052.792] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10e) returned 0x58cbd8 [0052.792] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10e) returned 0x58ccf0 [0052.792] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cbd8 | out: hHeap=0x570000) returned 1 [0052.792] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10e) returned 0x58cbd8 [0052.792] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x588258 [0052.792] GetLastError () returned 0x0 [0052.792] SetLastError (dwErrCode=0x0) [0052.792] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10ff394, cchData=2 | out: lpLCData="0") returned 2 [0052.792] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58cf40 [0052.792] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x58d210 [0052.793] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x583a30 [0052.793] GetLastError () returned 0x0 [0052.793] SetLastError (dwErrCode=0x0) [0052.793] GetLastError () returned 0x0 [0052.793] SetLastError (dwErrCode=0x0) [0052.793] GetLastError () returned 0x0 [0052.793] SetLastError (dwErrCode=0x0) [0052.793] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c378 [0052.793] GetLastError () returned 0x0 [0052.793] SetLastError (dwErrCode=0x0) [0052.793] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58d6a0 [0052.793] GetLastError () returned 0x0 [0052.793] SetLastError (dwErrCode=0x0) [0052.793] GetLastError () returned 0x0 [0052.793] SetLastError (dwErrCode=0x0) [0052.793] GetLastError () returned 0x0 [0052.793] SetLastError (dwErrCode=0x0) [0052.793] GetLastError () returned 0x0 [0052.793] SetLastError (dwErrCode=0x0) [0052.793] GetLastError () returned 0x0 [0052.793] SetLastError (dwErrCode=0x0) [0052.793] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f38 [0052.793] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a058 [0052.794] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5814d0 [0052.794] GetLastError () returned 0x0 [0052.794] SetLastError (dwErrCode=0x0) [0052.794] GetLastError () returned 0x0 [0052.794] SetLastError (dwErrCode=0x0) [0052.794] GetLastError () returned 0x0 [0052.794] SetLastError (dwErrCode=0x0) [0052.794] GetLastError () returned 0x0 [0052.794] SetLastError (dwErrCode=0x0) [0052.794] GetLastError () returned 0x0 [0052.794] SetLastError (dwErrCode=0x0) [0052.794] GetLastError () returned 0x0 [0052.794] SetLastError (dwErrCode=0x0) [0052.794] GetLastError () returned 0x0 [0052.794] SetLastError (dwErrCode=0x0) [0052.794] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f58 [0052.794] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x58d0d8 [0052.794] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x58d000 [0052.794] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x58cf28 [0052.794] GetLastError () returned 0x0 [0052.794] SetLastError (dwErrCode=0x0) [0052.794] GetLastError () returned 0x0 [0052.794] SetLastError (dwErrCode=0x0) [0052.794] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589fd8 [0052.794] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a098 [0052.795] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a0b8 [0052.795] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x5899e8 [0052.795] GetLastError () returned 0x0 [0052.795] SetLastError (dwErrCode=0x0) [0052.795] GetLastError () returned 0x0 [0052.795] SetLastError (dwErrCode=0x0) [0052.795] GetLastError () returned 0x0 [0052.795] SetLastError (dwErrCode=0x0) [0052.795] GetLastError () returned 0x0 [0052.795] SetLastError (dwErrCode=0x0) [0052.795] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a018 [0052.795] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a068 [0052.795] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589ff8 [0052.795] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x58a028 [0052.795] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589b08 [0052.795] GetLastError () returned 0x0 [0052.795] SetLastError (dwErrCode=0x0) [0052.795] GetLastError () returned 0x0 [0052.795] SetLastError (dwErrCode=0x0) [0052.795] GetLastError () returned 0x0 [0052.795] SetLastError (dwErrCode=0x0) [0052.795] GetLastError () returned 0x0 [0052.795] SetLastError (dwErrCode=0x0) [0052.795] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a0a8 [0052.796] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589f68 [0052.796] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589fb8 [0052.796] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589f78 [0052.796] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58bf68 [0052.796] GetLastError () returned 0x0 [0052.796] SetLastError (dwErrCode=0x0) [0052.796] GetLastError () returned 0x0 [0052.796] SetLastError (dwErrCode=0x0) [0052.796] GetLastError () returned 0x0 [0052.796] SetLastError (dwErrCode=0x0) [0052.796] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x5896e8 [0052.796] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589aa8 | out: hHeap=0x570000) returned 1 [0052.796] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589748 [0052.796] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5896e8 | out: hHeap=0x570000) returned 1 [0052.796] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xac) returned 0x58d8a8 [0052.796] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x58bc80 [0052.796] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b658 | out: hHeap=0x570000) returned 1 [0052.796] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x57b658 [0052.796] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58bc80 | out: hHeap=0x570000) returned 1 [0052.796] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10e) returned 0x58d960 [0052.796] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x588438 [0052.796] GetLastError () returned 0x0 [0052.796] SetLastError (dwErrCode=0x0) [0052.796] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10ff384, cchData=2 | out: lpLCData="0") returned 2 [0052.796] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58cfd0 [0052.796] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x58da78 [0052.796] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x583970 [0052.797] GetLastError () returned 0x0 [0052.797] SetLastError (dwErrCode=0x0) [0052.797] GetLastError () returned 0x0 [0052.797] SetLastError (dwErrCode=0x0) [0052.797] GetLastError () returned 0x0 [0052.797] SetLastError (dwErrCode=0x0) [0052.797] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589da8 | out: hHeap=0x570000) returned 1 [0052.797] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589da8 [0052.797] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x58a008 [0052.797] GetLastError () returned 0x0 [0052.797] SetLastError (dwErrCode=0x0) [0052.797] GetLastError () returned 0x0 [0052.797] SetLastError (dwErrCode=0x0) [0052.797] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58df08 [0052.797] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58dfc8 [0052.797] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58dfc8 | out: hHeap=0x570000) returned 1 [0052.797] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589de8 | out: hHeap=0x570000) returned 1 [0052.797] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bf48 | out: hHeap=0x570000) returned 1 [0052.797] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a008 | out: hHeap=0x570000) returned 1 [0052.797] GetLastError () returned 0x0 [0052.797] SetLastError (dwErrCode=0x0) [0052.798] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589f48 [0052.798] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e38 | out: hHeap=0x570000) returned 1 [0052.798] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e28 | out: hHeap=0x570000) returned 1 [0052.798] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ccf0 | out: hHeap=0x570000) returned 1 [0052.798] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0052.798] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b658 | out: hHeap=0x570000) returned 1 [0052.798] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589748 | out: hHeap=0x570000) returned 1 [0052.798] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x583a30 | out: hHeap=0x570000) returned 1 [0052.798] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589da8 | out: hHeap=0x570000) returned 1 [0052.798] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589da8 [0052.813] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x583970 | out: hHeap=0x570000) returned 1 [0052.813] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58da78 | out: hHeap=0x570000) returned 1 [0052.813] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cfd0 | out: hHeap=0x570000) returned 1 [0052.813] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d8a8 | out: hHeap=0x570000) returned 1 [0052.813] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d960 | out: hHeap=0x570000) returned 1 [0052.813] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588438 | out: hHeap=0x570000) returned 1 [0052.813] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58bf68 | out: hHeap=0x570000) returned 1 [0052.813] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0a8 | out: hHeap=0x570000) returned 1 [0052.813] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f68 | out: hHeap=0x570000) returned 1 [0052.813] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fb8 | out: hHeap=0x570000) returned 1 [0052.813] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f78 | out: hHeap=0x570000) returned 1 [0052.813] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589b08 | out: hHeap=0x570000) returned 1 [0052.813] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a018 | out: hHeap=0x570000) returned 1 [0052.813] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a068 | out: hHeap=0x570000) returned 1 [0052.813] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ff8 | out: hHeap=0x570000) returned 1 [0052.813] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a028 | out: hHeap=0x570000) returned 1 [0052.813] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5899e8 | out: hHeap=0x570000) returned 1 [0052.847] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0b8 | out: hHeap=0x570000) returned 1 [0052.847] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a098 | out: hHeap=0x570000) returned 1 [0052.847] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fd8 | out: hHeap=0x570000) returned 1 [0052.847] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cf28 | out: hHeap=0x570000) returned 1 [0052.847] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f58 | out: hHeap=0x570000) returned 1 [0052.847] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d0d8 | out: hHeap=0x570000) returned 1 [0052.847] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d000 | out: hHeap=0x570000) returned 1 [0052.847] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5814d0 | out: hHeap=0x570000) returned 1 [0052.847] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a058 | out: hHeap=0x570000) returned 1 [0052.847] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f38 | out: hHeap=0x570000) returned 1 [0052.847] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d6a0 | out: hHeap=0x570000) returned 1 [0052.847] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c378 | out: hHeap=0x570000) returned 1 [0052.847] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5834b0 | out: hHeap=0x570000) returned 1 [0052.847] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d210 | out: hHeap=0x570000) returned 1 [0052.847] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cf40 | out: hHeap=0x570000) returned 1 [0052.847] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579f68 | out: hHeap=0x570000) returned 1 [0052.847] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cbd8 | out: hHeap=0x570000) returned 1 [0052.847] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588258 | out: hHeap=0x570000) returned 1 [0052.847] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c238 | out: hHeap=0x570000) returned 1 [0052.847] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e88 | out: hHeap=0x570000) returned 1 [0052.848] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fc8 | out: hHeap=0x570000) returned 1 [0052.848] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fe8 | out: hHeap=0x570000) returned 1 [0052.848] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f28 | out: hHeap=0x570000) returned 1 [0052.848] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589568 | out: hHeap=0x570000) returned 1 [0052.848] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e68 | out: hHeap=0x570000) returned 1 [0052.848] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d88 | out: hHeap=0x570000) returned 1 [0052.848] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e18 | out: hHeap=0x570000) returned 1 [0052.848] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ed8 | out: hHeap=0x570000) returned 1 [0052.848] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589628 | out: hHeap=0x570000) returned 1 [0052.848] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589eb8 | out: hHeap=0x570000) returned 1 [0052.848] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d98 | out: hHeap=0x570000) returned 1 [0052.848] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d68 | out: hHeap=0x570000) returned 1 [0052.848] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5794d8 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589dd8 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579430 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579538 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581350 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d58 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e58 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ba78 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c5f8 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c748 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579448 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589a48 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x574c58 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bc18 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c0f8 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d38 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d48 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e98 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ea8 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589928 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d28 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e48 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ec8 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e08 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5895c8 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589df8 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589dc8 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ef8 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b8b8 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d18 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d78 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f08 | out: hHeap=0x570000) returned 1 [0052.853] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ee8 | out: hHeap=0x570000) returned 1 [0052.854] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581690 | out: hHeap=0x570000) returned 1 [0052.854] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589db8 | out: hHeap=0x570000) returned 1 [0052.854] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e78 | out: hHeap=0x570000) returned 1 [0052.854] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0f0 | out: hHeap=0x570000) returned 1 [0052.854] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5815b0 | out: hHeap=0x570000) returned 1 [0052.854] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5757d8 | out: hHeap=0x570000) returned 1 [0052.854] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589da8 | out: hHeap=0x570000) returned 1 [0052.854] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588230 | out: hHeap=0x570000) returned 1 [0052.854] GetComputerNameW (in: lpBuffer=0x10ff5ec, nSize=0x10ff5e8 | out: lpBuffer="NQDPDE", nSize=0x10ff5e8) returned 1 [0052.854] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x5834b0 [0052.854] GetLastError () returned 0xcb [0052.854] SetLastError (dwErrCode=0xcb) [0052.854] GetLastError () returned 0xcb [0052.854] SetLastError (dwErrCode=0xcb) [0052.854] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57bf48 [0052.854] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58c748 [0052.854] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c748 | out: hHeap=0x570000) returned 1 [0052.854] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f48 | out: hHeap=0x570000) returned 1 [0052.854] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58df08 | out: hHeap=0x570000) returned 1 [0052.854] GetLastError () returned 0xcb [0052.854] SetLastError (dwErrCode=0xcb) [0052.854] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x58a048 [0052.854] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589fb8 [0052.854] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x58a088 [0052.855] GetLastError () returned 0xcb [0052.855] SetLastError (dwErrCode=0xcb) [0052.855] GetLastError () returned 0xcb [0052.855] SetLastError (dwErrCode=0xcb) [0052.855] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57b428 [0052.855] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58c748 [0052.855] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c748 | out: hHeap=0x570000) returned 1 [0052.855] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a048 | out: hHeap=0x570000) returned 1 [0052.855] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bf48 | out: hHeap=0x570000) returned 1 [0052.855] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a088 | out: hHeap=0x570000) returned 1 [0052.855] GetLastError () returned 0xcb [0052.855] SetLastError (dwErrCode=0xcb) [0052.855] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x58a088 [0052.855] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589f38 [0052.855] GetLastError () returned 0xcb [0052.855] SetLastError (dwErrCode=0xcb) [0052.855] GetLastError () returned 0xcb [0052.855] SetLastError (dwErrCode=0xcb) [0052.855] GetLastError () returned 0xcb [0052.855] SetLastError (dwErrCode=0xcb) [0052.855] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x58a038 [0052.855] GetLastError () returned 0xcb [0052.855] SetLastError (dwErrCode=0xcb) [0052.855] GetLastError () returned 0xcb [0052.855] SetLastError (dwErrCode=0xcb) [0052.855] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57bf48 [0052.856] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58c748 [0052.856] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c748 | out: hHeap=0x570000) returned 1 [0052.856] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a088 | out: hHeap=0x570000) returned 1 [0052.856] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0052.856] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a038 | out: hHeap=0x570000) returned 1 [0052.856] GetLastError () returned 0xcb [0052.856] SetLastError (dwErrCode=0xcb) [0052.856] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589f68 [0052.856] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f38 | out: hHeap=0x570000) returned 1 [0052.856] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fb8 | out: hHeap=0x570000) returned 1 [0052.856] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588168 [0052.856] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589fe8 [0052.856] GetLastError () returned 0xcb [0052.856] SetLastError (dwErrCode=0xcb) [0052.856] GetLastError () returned 0xcb [0052.856] SetLastError (dwErrCode=0xcb) [0052.856] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57b428 [0052.856] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58c748 [0052.856] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c748 | out: hHeap=0x570000) returned 1 [0052.856] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f68 | out: hHeap=0x570000) returned 1 [0052.856] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bf48 | out: hHeap=0x570000) returned 1 [0052.856] GetLastError () returned 0xcb [0052.856] SetLastError (dwErrCode=0xcb) [0052.856] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x58a088 [0052.856] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589f68 [0052.856] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589fd8 [0052.856] GetLastError () returned 0xcb [0052.856] SetLastError (dwErrCode=0xcb) [0052.857] GetLastError () returned 0xcb [0052.857] SetLastError (dwErrCode=0xcb) [0052.857] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57bf48 [0052.857] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58c748 [0052.857] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c748 | out: hHeap=0x570000) returned 1 [0052.857] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a088 | out: hHeap=0x570000) returned 1 [0052.857] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0052.857] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fd8 | out: hHeap=0x570000) returned 1 [0052.857] GetLastError () returned 0xcb [0052.857] SetLastError (dwErrCode=0xcb) [0052.857] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589f98 [0052.857] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x58a0a8 [0052.857] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581690 [0052.857] GetLastError () returned 0xcb [0052.857] SetLastError (dwErrCode=0xcb) [0052.857] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58a0f0 [0052.857] GetLastError () returned 0xcb [0052.857] SetLastError (dwErrCode=0xcb) [0052.857] GetLastError () returned 0xcb [0052.857] SetLastError (dwErrCode=0xcb) [0052.857] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xa0) returned 0x5757d8 [0052.857] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a0b8 [0052.857] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589fa8 [0052.857] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5813d0 [0052.857] GetLastError () returned 0xcb [0052.857] SetLastError (dwErrCode=0xcb) [0052.857] GetLastError () returned 0xcb [0052.857] SetLastError (dwErrCode=0xcb) [0052.858] GetLastError () returned 0xcb [0052.858] SetLastError (dwErrCode=0xcb) [0052.858] GetLastError () returned 0xcb [0052.858] SetLastError (dwErrCode=0xcb) [0052.858] GetLastError () returned 0xcb [0052.858] SetLastError (dwErrCode=0xcb) [0052.858] GetLastError () returned 0xcb [0052.858] SetLastError (dwErrCode=0xcb) [0052.858] GetLastError () returned 0xcb [0052.858] SetLastError (dwErrCode=0xcb) [0052.858] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589fb8 [0052.858] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x6) returned 0x58a058 [0052.858] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x5) returned 0x58a008 [0052.858] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a068 [0052.858] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x579430 [0052.858] GetLastError () returned 0xcb [0052.858] SetLastError (dwErrCode=0xcb) [0052.858] GetLastError () returned 0xcb [0052.858] SetLastError (dwErrCode=0xcb) [0052.858] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589fc8 [0052.858] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f78 [0052.858] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f88 [0052.858] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x5896e8 [0052.858] GetLastError () returned 0xcb [0052.858] SetLastError (dwErrCode=0xcb) [0052.858] GetLastError () returned 0xcb [0052.859] SetLastError (dwErrCode=0xcb) [0052.859] GetLastError () returned 0xcb [0052.859] SetLastError (dwErrCode=0xcb) [0052.859] GetLastError () returned 0xcb [0052.859] SetLastError (dwErrCode=0xcb) [0052.859] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f38 [0052.859] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589fd8 [0052.859] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a018 [0052.859] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a038 [0052.859] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x5899e8 [0052.859] GetLastError () returned 0xcb [0052.859] SetLastError (dwErrCode=0xcb) [0052.859] GetLastError () returned 0xcb [0052.859] SetLastError (dwErrCode=0xcb) [0052.859] GetLastError () returned 0xcb [0052.859] SetLastError (dwErrCode=0xcb) [0052.859] GetLastError () returned 0xcb [0052.859] SetLastError (dwErrCode=0xcb) [0052.859] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589ff8 [0052.859] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a0c8 [0052.859] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f48 [0052.859] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a0d8 [0052.859] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c198 [0052.859] GetLastError () returned 0xcb [0052.859] SetLastError (dwErrCode=0xcb) [0052.859] GetLastError () returned 0xcb [0052.859] SetLastError (dwErrCode=0xcb) [0052.859] GetLastError () returned 0xcb [0052.860] SetLastError (dwErrCode=0xcb) [0052.860] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589808 [0052.860] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x5895c8 [0052.860] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589808 | out: hHeap=0x570000) returned 1 [0052.860] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x56) returned 0x589628 [0052.860] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x574c58 [0052.860] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x579f68 [0052.860] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x574c58 | out: hHeap=0x570000) returned 1 [0052.860] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x87) returned 0x574c58 [0052.860] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xd) returned 0x579448 [0052.860] GetLastError () returned 0xcb [0052.860] SetLastError (dwErrCode=0xcb) [0052.860] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10ff3a8, cchData=2 | out: lpLCData="0") returned 2 [0052.860] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x5794d8 [0052.860] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x58c748 [0052.860] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c148 [0052.860] GetLastError () returned 0xcb [0052.860] SetLastError (dwErrCode=0xcb) [0052.860] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58ba78 [0052.860] GetLastError () returned 0xcb [0052.860] SetLastError (dwErrCode=0xcb) [0052.860] GetLastError () returned 0xcb [0052.860] SetLastError (dwErrCode=0xcb) [0052.860] GetLastError () returned 0xcb [0052.860] SetLastError (dwErrCode=0xcb) [0052.860] GetLastError () returned 0xcb [0052.860] SetLastError (dwErrCode=0xcb) [0052.860] GetLastError () returned 0xcb [0052.860] SetLastError (dwErrCode=0xcb) [0052.860] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a028 [0052.861] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a048 [0052.861] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581350 [0052.861] GetLastError () returned 0xcb [0052.861] SetLastError (dwErrCode=0xcb) [0052.861] GetLastError () returned 0xcb [0052.861] SetLastError (dwErrCode=0xcb) [0052.861] GetLastError () returned 0xcb [0052.861] SetLastError (dwErrCode=0xcb) [0052.861] GetLastError () returned 0xcb [0052.861] SetLastError (dwErrCode=0xcb) [0052.861] GetLastError () returned 0xcb [0052.861] SetLastError (dwErrCode=0xcb) [0052.861] GetLastError () returned 0xcb [0052.861] SetLastError (dwErrCode=0xcb) [0052.861] GetLastError () returned 0xcb [0052.861] SetLastError (dwErrCode=0xcb) [0052.861] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a078 [0052.861] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x579538 [0052.861] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x57b8b8 [0052.861] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x57bc18 [0052.861] GetLastError () returned 0xcb [0052.861] SetLastError (dwErrCode=0xcb) [0052.861] GetLastError () returned 0xcb [0052.861] SetLastError (dwErrCode=0xcb) [0052.861] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a088 [0052.861] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f58 [0052.862] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a098 [0052.862] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x5898c8 [0052.862] GetLastError () returned 0xcb [0052.862] SetLastError (dwErrCode=0xcb) [0052.862] GetLastError () returned 0xcb [0052.862] SetLastError (dwErrCode=0xcb) [0052.862] GetLastError () returned 0xcb [0052.862] SetLastError (dwErrCode=0xcb) [0052.862] GetLastError () returned 0xcb [0052.862] SetLastError (dwErrCode=0xcb) [0052.862] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f18 [0052.862] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589f28 [0052.862] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589ec8 [0052.862] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589d38 [0052.862] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589988 [0052.862] GetLastError () returned 0xcb [0052.862] SetLastError (dwErrCode=0xcb) [0052.862] GetLastError () returned 0xcb [0052.862] SetLastError (dwErrCode=0xcb) [0052.862] GetLastError () returned 0xcb [0052.862] SetLastError (dwErrCode=0xcb) [0052.862] GetLastError () returned 0xcb [0052.862] SetLastError (dwErrCode=0xcb) [0052.862] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589d98 [0052.862] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589ed8 [0052.862] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d28 [0052.862] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589df8 [0052.862] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c378 [0052.862] GetLastError () returned 0xcb [0052.863] SetLastError (dwErrCode=0xcb) [0052.863] GetLastError () returned 0xcb [0052.863] SetLastError (dwErrCode=0xcb) [0052.863] GetLastError () returned 0xcb [0052.863] SetLastError (dwErrCode=0xcb) [0052.863] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x57b658 [0052.863] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x57b428 [0052.863] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b658 | out: hHeap=0x570000) returned 1 [0052.863] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xac) returned 0x57b658 [0052.863] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10e) returned 0x58cbd8 [0052.863] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10e) returned 0x58ccf0 [0052.863] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cbd8 | out: hHeap=0x570000) returned 1 [0052.863] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10e) returned 0x58cbd8 [0052.863] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x588230 [0052.863] GetLastError () returned 0xcb [0052.863] SetLastError (dwErrCode=0xcb) [0052.863] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10ff394, cchData=2 | out: lpLCData="0") returned 2 [0052.863] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58d018 [0052.863] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x58d210 [0052.863] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x5836b0 [0052.863] GetLastError () returned 0xcb [0052.863] SetLastError (dwErrCode=0xcb) [0052.863] GetLastError () returned 0xcb [0052.863] SetLastError (dwErrCode=0xcb) [0052.863] GetLastError () returned 0xcb [0052.863] SetLastError (dwErrCode=0xcb) [0052.863] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c468 [0052.863] GetLastError () returned 0xcb [0052.863] SetLastError (dwErrCode=0xcb) [0052.864] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58d6a0 [0052.864] GetLastError () returned 0xcb [0052.864] SetLastError (dwErrCode=0xcb) [0052.864] GetLastError () returned 0xcb [0052.864] SetLastError (dwErrCode=0xcb) [0052.864] GetLastError () returned 0xcb [0052.864] SetLastError (dwErrCode=0xcb) [0052.864] GetLastError () returned 0xcb [0052.864] SetLastError (dwErrCode=0xcb) [0052.864] GetLastError () returned 0xcb [0052.864] SetLastError (dwErrCode=0xcb) [0052.864] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d48 [0052.864] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e28 [0052.864] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581650 [0052.864] GetLastError () returned 0xcb [0052.864] SetLastError (dwErrCode=0xcb) [0052.864] GetLastError () returned 0xcb [0052.864] SetLastError (dwErrCode=0xcb) [0052.864] GetLastError () returned 0xcb [0052.864] SetLastError (dwErrCode=0xcb) [0052.864] GetLastError () returned 0xcb [0052.864] SetLastError (dwErrCode=0xcb) [0052.864] GetLastError () returned 0xcb [0052.864] SetLastError (dwErrCode=0xcb) [0052.864] GetLastError () returned 0xcb [0052.864] SetLastError (dwErrCode=0xcb) [0052.864] GetLastError () returned 0xcb [0052.864] SetLastError (dwErrCode=0xcb) [0052.864] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589db8 [0052.865] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x58ce68 [0052.865] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x58d030 [0052.865] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x58cf10 [0052.865] GetLastError () returned 0xcb [0052.865] SetLastError (dwErrCode=0xcb) [0052.865] GetLastError () returned 0xcb [0052.865] SetLastError (dwErrCode=0xcb) [0052.865] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d78 [0052.865] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589da8 [0052.865] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589ee8 [0052.865] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589c88 [0052.865] GetLastError () returned 0xcb [0052.865] SetLastError (dwErrCode=0xcb) [0052.865] GetLastError () returned 0xcb [0052.865] SetLastError (dwErrCode=0xcb) [0052.865] GetLastError () returned 0xcb [0052.865] SetLastError (dwErrCode=0xcb) [0052.865] GetLastError () returned 0xcb [0052.865] SetLastError (dwErrCode=0xcb) [0052.865] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589dc8 [0052.865] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589e78 [0052.865] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589e38 [0052.865] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589ea8 [0052.865] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589aa8 [0052.866] GetLastError () returned 0xcb [0052.866] SetLastError (dwErrCode=0xcb) [0052.866] GetLastError () returned 0xcb [0052.866] SetLastError (dwErrCode=0xcb) [0052.866] GetLastError () returned 0xcb [0052.866] SetLastError (dwErrCode=0xcb) [0052.866] GetLastError () returned 0xcb [0052.866] SetLastError (dwErrCode=0xcb) [0052.866] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589eb8 [0052.866] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589ef8 [0052.866] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d58 [0052.866] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589d68 [0052.866] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c5a8 [0052.866] GetLastError () returned 0xcb [0052.866] SetLastError (dwErrCode=0xcb) [0052.866] GetLastError () returned 0xcb [0052.866] SetLastError (dwErrCode=0xcb) [0052.866] GetLastError () returned 0xcb [0052.866] SetLastError (dwErrCode=0xcb) [0052.866] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589b68 [0052.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5895c8 | out: hHeap=0x570000) returned 1 [0052.866] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589928 [0052.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589b68 | out: hHeap=0x570000) returned 1 [0052.866] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xac) returned 0x58d8a8 [0052.866] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x58bc80 [0052.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579f68 | out: hHeap=0x570000) returned 1 [0052.866] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x579f68 [0052.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58bc80 | out: hHeap=0x570000) returned 1 [0052.866] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10e) returned 0x58d960 [0052.866] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x5882f8 [0052.866] GetLastError () returned 0xcb [0052.866] SetLastError (dwErrCode=0xcb) [0052.866] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10ff384, cchData=2 | out: lpLCData="0") returned 2 [0052.867] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58d0a8 [0052.867] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x58da78 [0052.867] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x5839b0 [0052.867] GetLastError () returned 0xcb [0052.867] SetLastError (dwErrCode=0xcb) [0052.867] GetLastError () returned 0xcb [0052.867] SetLastError (dwErrCode=0xcb) [0052.867] GetLastError () returned 0xcb [0052.867] SetLastError (dwErrCode=0xcb) [0052.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fe8 | out: hHeap=0x570000) returned 1 [0052.867] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589fe8 [0052.867] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589e58 [0052.867] GetLastError () returned 0xcb [0052.867] SetLastError (dwErrCode=0xcb) [0052.867] GetLastError () returned 0xcb [0052.867] SetLastError (dwErrCode=0xcb) [0052.867] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58df08 [0052.867] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58dfc8 [0052.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58dfc8 | out: hHeap=0x570000) returned 1 [0052.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f98 | out: hHeap=0x570000) returned 1 [0052.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bf48 | out: hHeap=0x570000) returned 1 [0052.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e58 | out: hHeap=0x570000) returned 1 [0052.867] GetLastError () returned 0xcb [0052.867] SetLastError (dwErrCode=0xcb) [0052.867] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589e88 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0a8 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f68 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ccf0 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579f68 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589928 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5836b0 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fe8 | out: hHeap=0x570000) returned 1 [0052.868] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x58a0a8 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5839b0 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58da78 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d0a8 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d8a8 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d960 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5882f8 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c5a8 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589eb8 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ef8 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d58 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d68 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589aa8 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589dc8 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e78 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e38 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ea8 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589c88 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ee8 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589da8 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d78 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cf10 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589db8 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ce68 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d030 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581650 | out: hHeap=0x570000) returned 1 [0052.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e28 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d48 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d6a0 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c468 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5834b0 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d210 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d018 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b658 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cbd8 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588230 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c378 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d98 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ed8 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d28 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589df8 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589988 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f18 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f28 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ec8 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d38 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5898c8 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a098 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f58 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a088 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bc18 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a078 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579538 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b8b8 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581350 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a048 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a028 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ba78 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c148 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c748 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5794d8 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589628 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x574c58 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579448 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c198 | out: hHeap=0x570000) returned 1 [0052.869] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ff8 | out: hHeap=0x570000) returned 1 [0052.870] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0c8 | out: hHeap=0x570000) returned 1 [0052.870] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f48 | out: hHeap=0x570000) returned 1 [0052.870] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0d8 | out: hHeap=0x570000) returned 1 [0052.870] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5899e8 | out: hHeap=0x570000) returned 1 [0052.870] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f38 | out: hHeap=0x570000) returned 1 [0052.870] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fd8 | out: hHeap=0x570000) returned 1 [0052.870] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a018 | out: hHeap=0x570000) returned 1 [0052.870] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a038 | out: hHeap=0x570000) returned 1 [0052.870] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5896e8 | out: hHeap=0x570000) returned 1 [0052.870] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f88 | out: hHeap=0x570000) returned 1 [0052.870] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f78 | out: hHeap=0x570000) returned 1 [0052.870] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fc8 | out: hHeap=0x570000) returned 1 [0052.870] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579430 | out: hHeap=0x570000) returned 1 [0052.870] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a068 | out: hHeap=0x570000) returned 1 [0052.870] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fb8 | out: hHeap=0x570000) returned 1 [0052.870] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a058 | out: hHeap=0x570000) returned 1 [0052.870] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a008 | out: hHeap=0x570000) returned 1 [0052.870] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5813d0 | out: hHeap=0x570000) returned 1 [0052.870] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fa8 | out: hHeap=0x570000) returned 1 [0052.870] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0b8 | out: hHeap=0x570000) returned 1 [0052.870] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0f0 | out: hHeap=0x570000) returned 1 [0052.870] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581690 | out: hHeap=0x570000) returned 1 [0052.870] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5757d8 | out: hHeap=0x570000) returned 1 [0052.870] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0a8 | out: hHeap=0x570000) returned 1 [0052.870] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588168 | out: hHeap=0x570000) returned 1 [0052.870] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x10ff6c8 | out: lpSystemTimeAsFileTime=0x10ff6c8*(dwLowDateTime=0x823f7c09, dwHighDateTime=0x1d6ce14)) [0052.870] GetLastError () returned 0xcb [0052.870] SetLastError (dwErrCode=0xcb) [0052.870] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x24) returned 0x580d58 [0052.870] GetEnvironmentStringsW () returned 0x58d210* [0052.870] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xaca) returned 0x58dfc8 [0052.870] FreeEnvironmentStringsW (penv=0x58d210) returned 1 [0052.870] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x94) returned 0x5757d8 [0052.870] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3e) returned 0x57fd78 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x50) returned 0x58a3f0 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x6e) returned 0x5791c8 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x78) returned 0x5799e0 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x62) returned 0x575ce0 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x28) returned 0x580b18 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x48) returned 0x58c288 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x588168 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2e) returned 0x588898 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x56) returned 0x5896e8 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2a) returned 0x5888d0 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2e) returned 0x588b70 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x44) returned 0x58bfb8 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1c) returned 0x5883c0 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x182) returned 0x58a0f0 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x7c) returned 0x574c58 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x36) returned 0x5835b0 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x57faf0 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x90) returned 0x57b658 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x24) returned 0x580b78 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x30) returned 0x588a20 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x36) returned 0x583970 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x48) returned 0x58c508 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x52) returned 0x589748 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3c) returned 0x580048 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xd6) returned 0x58a280 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2e) returned 0x5886a0 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x588230 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2c) returned 0x588ba8 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x50) returned 0x58a448 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4e) returned 0x58a398 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x24) returned 0x580ba8 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x42) returned 0x58c4b8 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x20) returned 0x5882f8 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x38) returned 0x5839b0 [0052.871] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x24) returned 0x580bd8 [0052.872] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58dfc8 | out: hHeap=0x570000) returned 1 [0052.889] GetTimeZoneInformation (in: lpTimeZoneInformation=0x4f1588 | out: lpTimeZoneInformation=0x4f1588) returned 0x1 [0052.889] GetLastError () returned 0xcb [0052.889] SetLastError (dwErrCode=0xcb) [0052.889] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="W. Europe Standard Time", cchWideChar=-1, lpMultiByteStr=0x4d0460, cbMultiByte=64, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="W. Europe Standard Time", lpUsedDefaultChar=0x0) returned 24 [0052.889] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="W. Europe Daylight Time", cchWideChar=-1, lpMultiByteStr=0x4d04a0, cbMultiByte=64, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="W. Europe Daylight Time", lpUsedDefaultChar=0x0) returned 24 [0052.906] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x50) returned 0x58a708 [0052.906] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x583630 [0052.906] GetLastError () returned 0xcb [0052.906] SetLastError (dwErrCode=0xcb) [0052.906] GetLastError () returned 0xcb [0052.906] SetLastError (dwErrCode=0xcb) [0052.906] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57bf48 [0052.906] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58c748 [0052.906] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c748 | out: hHeap=0x570000) returned 1 [0052.906] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e88 | out: hHeap=0x570000) returned 1 [0052.906] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58df08 | out: hHeap=0x570000) returned 1 [0052.906] GetLastError () returned 0xcb [0052.906] SetLastError (dwErrCode=0xcb) [0052.906] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589d68 [0052.906] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589e08 [0052.906] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589f08 [0052.906] GetLastError () returned 0xcb [0052.906] SetLastError (dwErrCode=0xcb) [0052.906] GetLastError () returned 0xcb [0052.906] SetLastError (dwErrCode=0xcb) [0052.906] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57b428 [0052.907] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58c748 [0052.907] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c748 | out: hHeap=0x570000) returned 1 [0052.907] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d68 | out: hHeap=0x570000) returned 1 [0052.907] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bf48 | out: hHeap=0x570000) returned 1 [0052.907] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f08 | out: hHeap=0x570000) returned 1 [0052.907] GetLastError () returned 0xcb [0052.907] SetLastError (dwErrCode=0xcb) [0052.907] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589da8 [0052.907] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589e78 [0052.907] GetLastError () returned 0xcb [0052.907] SetLastError (dwErrCode=0xcb) [0052.907] GetLastError () returned 0xcb [0052.907] SetLastError (dwErrCode=0xcb) [0052.907] GetLastError () returned 0xcb [0052.907] SetLastError (dwErrCode=0xcb) [0052.907] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589e28 [0052.907] GetLastError () returned 0xcb [0052.907] SetLastError (dwErrCode=0xcb) [0052.907] GetLastError () returned 0xcb [0052.907] SetLastError (dwErrCode=0xcb) [0052.907] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57bf48 [0052.907] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58c748 [0052.907] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c748 | out: hHeap=0x570000) returned 1 [0052.907] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589da8 | out: hHeap=0x570000) returned 1 [0052.907] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0052.907] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e28 | out: hHeap=0x570000) returned 1 [0052.907] GetLastError () returned 0xcb [0052.908] SetLastError (dwErrCode=0xcb) [0052.908] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589d48 [0052.908] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e78 | out: hHeap=0x570000) returned 1 [0052.908] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e08 | out: hHeap=0x570000) returned 1 [0052.908] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588320 [0052.908] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589d18 [0052.908] GetLastError () returned 0xcb [0052.908] SetLastError (dwErrCode=0xcb) [0052.908] GetLastError () returned 0xcb [0052.908] SetLastError (dwErrCode=0xcb) [0052.908] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57b428 [0052.908] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58c748 [0052.908] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c748 | out: hHeap=0x570000) returned 1 [0052.908] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d48 | out: hHeap=0x570000) returned 1 [0052.908] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bf48 | out: hHeap=0x570000) returned 1 [0052.908] GetLastError () returned 0xcb [0052.908] SetLastError (dwErrCode=0xcb) [0052.908] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589dc8 [0052.908] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589d48 [0052.908] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589dd8 [0052.908] GetLastError () returned 0xcb [0052.908] SetLastError (dwErrCode=0xcb) [0052.908] GetLastError () returned 0xcb [0052.908] SetLastError (dwErrCode=0xcb) [0052.908] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57bf48 [0052.908] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58c748 [0052.908] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c748 | out: hHeap=0x570000) returned 1 [0052.909] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589dc8 | out: hHeap=0x570000) returned 1 [0052.909] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0052.909] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589dd8 | out: hHeap=0x570000) returned 1 [0052.909] GetLastError () returned 0xcb [0052.909] SetLastError (dwErrCode=0xcb) [0052.909] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589de8 [0052.909] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589d58 [0052.909] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581350 [0052.909] GetLastError () returned 0xcb [0052.909] SetLastError (dwErrCode=0xcb) [0052.909] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58ba78 [0052.909] GetLastError () returned 0xcb [0052.909] SetLastError (dwErrCode=0xcb) [0052.909] GetLastError () returned 0xcb [0052.909] SetLastError (dwErrCode=0xcb) [0052.909] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xa0) returned 0x58bc80 [0052.909] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d28 [0052.909] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589ea8 [0052.909] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5815b0 [0052.909] GetLastError () returned 0xcb [0052.909] SetLastError (dwErrCode=0xcb) [0052.909] GetLastError () returned 0xcb [0052.909] SetLastError (dwErrCode=0xcb) [0052.909] GetLastError () returned 0xcb [0052.909] SetLastError (dwErrCode=0xcb) [0052.909] GetLastError () returned 0xcb [0052.909] SetLastError (dwErrCode=0xcb) [0052.909] GetLastError () returned 0xcb [0052.909] SetLastError (dwErrCode=0xcb) [0052.909] GetLastError () returned 0xcb [0052.910] SetLastError (dwErrCode=0xcb) [0052.910] GetLastError () returned 0xcb [0052.910] SetLastError (dwErrCode=0xcb) [0052.910] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e98 [0052.910] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x6) returned 0x589d38 [0052.910] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x5) returned 0x589e48 [0052.910] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e08 [0052.910] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x5794d8 [0052.910] GetLastError () returned 0xcb [0052.910] SetLastError (dwErrCode=0xcb) [0052.910] GetLastError () returned 0xcb [0052.910] SetLastError (dwErrCode=0xcb) [0052.910] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589da8 [0052.910] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589dd8 [0052.910] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e28 [0052.910] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589688 [0052.910] GetLastError () returned 0xcb [0052.910] SetLastError (dwErrCode=0xcb) [0052.910] GetLastError () returned 0xcb [0052.910] SetLastError (dwErrCode=0xcb) [0052.910] GetLastError () returned 0xcb [0052.910] SetLastError (dwErrCode=0xcb) [0052.910] GetLastError () returned 0xcb [0052.910] SetLastError (dwErrCode=0xcb) [0052.910] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589df8 [0052.910] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e38 [0052.910] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e58 [0052.910] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589e78 [0052.910] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x5897a8 [0052.911] GetLastError () returned 0xcb [0052.911] SetLastError (dwErrCode=0xcb) [0052.911] GetLastError () returned 0xcb [0052.911] SetLastError (dwErrCode=0xcb) [0052.911] GetLastError () returned 0xcb [0052.911] SetLastError (dwErrCode=0xcb) [0052.911] GetLastError () returned 0xcb [0052.911] SetLastError (dwErrCode=0xcb) [0052.911] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589eb8 [0052.911] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589d78 [0052.911] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f08 [0052.911] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589ee8 [0052.911] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c6e8 [0052.911] GetLastError () returned 0xcb [0052.911] SetLastError (dwErrCode=0xcb) [0052.911] GetLastError () returned 0xcb [0052.911] SetLastError (dwErrCode=0xcb) [0052.911] GetLastError () returned 0xcb [0052.911] SetLastError (dwErrCode=0xcb) [0052.911] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589808 [0052.911] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589c28 [0052.911] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589808 | out: hHeap=0x570000) returned 1 [0052.911] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x56) returned 0x589808 [0052.911] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x579f68 [0052.911] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x57b428 [0052.911] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579f68 | out: hHeap=0x570000) returned 1 [0052.911] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x87) returned 0x57b4b8 [0052.911] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xd) returned 0x579538 [0052.911] GetLastError () returned 0xcb [0052.911] SetLastError (dwErrCode=0xcb) [0052.911] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10ff508, cchData=2 | out: lpLCData="0") returned 2 [0052.912] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x579430 [0052.912] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x58c748 [0052.912] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58bf68 [0052.912] GetLastError () returned 0xcb [0052.912] SetLastError (dwErrCode=0xcb) [0052.912] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58cbd8 [0052.912] GetLastError () returned 0xcb [0052.912] SetLastError (dwErrCode=0xcb) [0052.912] GetLastError () returned 0xcb [0052.912] SetLastError (dwErrCode=0xcb) [0052.912] GetLastError () returned 0xcb [0052.912] SetLastError (dwErrCode=0xcb) [0052.912] GetLastError () returned 0xcb [0052.912] SetLastError (dwErrCode=0xcb) [0052.912] GetLastError () returned 0xcb [0052.912] SetLastError (dwErrCode=0xcb) [0052.912] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e68 [0052.912] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589ec8 [0052.912] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5815d0 [0052.912] GetLastError () returned 0xcb [0052.912] SetLastError (dwErrCode=0xcb) [0052.912] GetLastError () returned 0xcb [0052.912] SetLastError (dwErrCode=0xcb) [0052.912] GetLastError () returned 0xcb [0052.912] SetLastError (dwErrCode=0xcb) [0052.912] GetLastError () returned 0xcb [0052.912] SetLastError (dwErrCode=0xcb) [0052.912] GetLastError () returned 0xcb [0052.912] SetLastError (dwErrCode=0xcb) [0052.912] GetLastError () returned 0xcb [0052.913] SetLastError (dwErrCode=0xcb) [0052.913] GetLastError () returned 0xcb [0052.913] SetLastError (dwErrCode=0xcb) [0052.913] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e88 [0052.913] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x579448 [0052.913] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x57b8b8 [0052.913] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x57bc18 [0052.913] GetLastError () returned 0xcb [0052.913] SetLastError (dwErrCode=0xcb) [0052.913] GetLastError () returned 0xcb [0052.913] SetLastError (dwErrCode=0xcb) [0052.913] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589ef8 [0052.913] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589db8 [0052.913] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d88 [0052.913] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589868 [0052.913] GetLastError () returned 0xcb [0052.913] SetLastError (dwErrCode=0xcb) [0052.913] GetLastError () returned 0xcb [0052.913] SetLastError (dwErrCode=0xcb) [0052.913] GetLastError () returned 0xcb [0052.913] SetLastError (dwErrCode=0xcb) [0052.913] GetLastError () returned 0xcb [0052.913] SetLastError (dwErrCode=0xcb) [0052.913] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e18 [0052.913] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589ed8 [0052.913] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d68 [0052.913] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589d98 [0052.913] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589988 [0052.913] GetLastError () returned 0xcb [0052.914] SetLastError (dwErrCode=0xcb) [0052.914] GetLastError () returned 0xcb [0052.914] SetLastError (dwErrCode=0xcb) [0052.914] GetLastError () returned 0xcb [0052.914] SetLastError (dwErrCode=0xcb) [0052.914] GetLastError () returned 0xcb [0052.914] SetLastError (dwErrCode=0xcb) [0052.914] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589dc8 [0052.914] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589f38 [0052.914] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a098 [0052.914] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x58a008 [0052.914] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c008 [0052.914] GetLastError () returned 0xcb [0052.914] SetLastError (dwErrCode=0xcb) [0052.914] GetLastError () returned 0xcb [0052.914] SetLastError (dwErrCode=0xcb) [0052.914] GetLastError () returned 0xcb [0052.914] SetLastError (dwErrCode=0xcb) [0052.914] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x579f68 [0052.914] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x58cde0 [0052.914] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579f68 | out: hHeap=0x570000) returned 1 [0052.914] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xac) returned 0x579f68 [0052.914] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10e) returned 0x58ce98 [0052.914] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10e) returned 0x58cfb0 [0052.914] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ce98 | out: hHeap=0x570000) returned 1 [0052.914] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10e) returned 0x58ce98 [0052.914] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x588258 [0052.914] GetLastError () returned 0xcb [0052.914] SetLastError (dwErrCode=0xcb) [0052.914] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10ff4f4, cchData=2 | out: lpLCData="0") returned 2 [0052.914] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58d368 [0052.914] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x58d4d0 [0052.915] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x583a30 [0052.915] GetLastError () returned 0xcb [0052.915] SetLastError (dwErrCode=0xcb) [0052.915] GetLastError () returned 0xcb [0052.915] SetLastError (dwErrCode=0xcb) [0052.915] GetLastError () returned 0xcb [0052.915] SetLastError (dwErrCode=0xcb) [0052.915] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c698 [0052.915] GetLastError () returned 0xcb [0052.915] SetLastError (dwErrCode=0xcb) [0052.915] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58d960 [0052.915] GetLastError () returned 0xcb [0052.915] SetLastError (dwErrCode=0xcb) [0052.915] GetLastError () returned 0xcb [0052.915] SetLastError (dwErrCode=0xcb) [0052.915] GetLastError () returned 0xcb [0052.915] SetLastError (dwErrCode=0xcb) [0052.915] GetLastError () returned 0xcb [0052.915] SetLastError (dwErrCode=0xcb) [0052.915] GetLastError () returned 0xcb [0052.915] SetLastError (dwErrCode=0xcb) [0052.915] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a078 [0052.915] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a088 [0052.915] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581490 [0052.915] GetLastError () returned 0xcb [0052.915] SetLastError (dwErrCode=0xcb) [0052.915] GetLastError () returned 0xcb [0052.915] SetLastError (dwErrCode=0xcb) [0052.915] GetLastError () returned 0xcb [0052.915] SetLastError (dwErrCode=0xcb) [0052.915] GetLastError () returned 0xcb [0052.915] SetLastError (dwErrCode=0xcb) [0052.916] GetLastError () returned 0xcb [0052.916] SetLastError (dwErrCode=0xcb) [0052.916] GetLastError () returned 0xcb [0052.916] SetLastError (dwErrCode=0xcb) [0052.916] GetLastError () returned 0xcb [0052.916] SetLastError (dwErrCode=0xcb) [0052.916] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a018 [0052.916] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x58d128 [0052.916] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x58d1e8 [0052.916] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x58d398 [0052.916] GetLastError () returned 0xcb [0052.916] SetLastError (dwErrCode=0xcb) [0052.916] GetLastError () returned 0xcb [0052.916] SetLastError (dwErrCode=0xcb) [0052.916] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f48 [0052.916] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589fc8 [0052.916] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589fd8 [0052.916] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589568 [0052.916] GetLastError () returned 0xcb [0052.916] SetLastError (dwErrCode=0xcb) [0052.916] GetLastError () returned 0xcb [0052.916] SetLastError (dwErrCode=0xcb) [0052.916] GetLastError () returned 0xcb [0052.916] SetLastError (dwErrCode=0xcb) [0052.917] GetLastError () returned 0xcb [0052.917] SetLastError (dwErrCode=0xcb) [0052.917] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a0a8 [0052.917] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a028 [0052.917] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a0b8 [0052.917] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589f58 [0052.917] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589928 [0052.917] GetLastError () returned 0xcb [0052.917] SetLastError (dwErrCode=0xcb) [0052.917] GetLastError () returned 0xcb [0052.917] SetLastError (dwErrCode=0xcb) [0052.917] GetLastError () returned 0xcb [0052.917] SetLastError (dwErrCode=0xcb) [0052.917] GetLastError () returned 0xcb [0052.917] SetLastError (dwErrCode=0xcb) [0052.917] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589fb8 [0052.917] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a058 [0052.917] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a038 [0052.917] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589f68 [0052.917] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c5a8 [0052.917] GetLastError () returned 0xcb [0052.917] SetLastError (dwErrCode=0xcb) [0052.917] GetLastError () returned 0xcb [0052.917] SetLastError (dwErrCode=0xcb) [0052.917] GetLastError () returned 0xcb [0052.917] SetLastError (dwErrCode=0xcb) [0052.917] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x5898c8 [0052.917] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589c28 | out: hHeap=0x570000) returned 1 [0052.917] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589628 [0052.917] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5898c8 | out: hHeap=0x570000) returned 1 [0052.918] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xac) returned 0x58db68 [0052.918] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x58dc20 [0052.918] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0052.918] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x57b428 [0052.918] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58dc20 | out: hHeap=0x570000) returned 1 [0052.918] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10e) returned 0x58dc20 [0052.918] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x588348 [0052.918] GetLastError () returned 0xcb [0052.918] SetLastError (dwErrCode=0xcb) [0052.918] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10ff4e4, cchData=2 | out: lpLCData="0") returned 2 [0052.918] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58d2c0 [0052.918] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x58dd38 [0052.918] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x583730 [0052.918] GetLastError () returned 0xcb [0052.918] SetLastError (dwErrCode=0xcb) [0052.918] GetLastError () returned 0xcb [0052.918] SetLastError (dwErrCode=0xcb) [0052.918] GetLastError () returned 0xcb [0052.918] SetLastError (dwErrCode=0xcb) [0052.918] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d18 | out: hHeap=0x570000) returned 1 [0052.918] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589d18 [0052.918] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x58a0c8 [0052.918] GetLastError () returned 0xcb [0052.918] SetLastError (dwErrCode=0xcb) [0052.918] GetLastError () returned 0xcb [0052.918] SetLastError (dwErrCode=0xcb) [0052.918] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e1c8 [0052.919] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58e288 [0052.919] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e288 | out: hHeap=0x570000) returned 1 [0052.919] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589de8 | out: hHeap=0x570000) returned 1 [0052.919] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bf48 | out: hHeap=0x570000) returned 1 [0052.919] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0c8 | out: hHeap=0x570000) returned 1 [0052.919] GetLastError () returned 0xcb [0052.919] SetLastError (dwErrCode=0xcb) [0052.919] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x58a0c8 [0052.919] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d58 | out: hHeap=0x570000) returned 1 [0052.919] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d48 | out: hHeap=0x570000) returned 1 [0052.919] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cfb0 | out: hHeap=0x570000) returned 1 [0052.919] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cde0 | out: hHeap=0x570000) returned 1 [0052.919] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0052.919] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589628 | out: hHeap=0x570000) returned 1 [0052.919] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x583a30 | out: hHeap=0x570000) returned 1 [0052.919] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d18 | out: hHeap=0x570000) returned 1 [0052.919] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589d18 [0052.937] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588370 [0052.937] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x30) returned 0x588a58 [0052.937] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588370 | out: hHeap=0x570000) returned 1 [0052.937] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x583730 | out: hHeap=0x570000) returned 1 [0052.937] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58dd38 | out: hHeap=0x570000) returned 1 [0052.937] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d2c0 | out: hHeap=0x570000) returned 1 [0052.937] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58db68 | out: hHeap=0x570000) returned 1 [0052.937] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58dc20 | out: hHeap=0x570000) returned 1 [0052.937] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588348 | out: hHeap=0x570000) returned 1 [0052.937] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c5a8 | out: hHeap=0x570000) returned 1 [0052.937] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fb8 | out: hHeap=0x570000) returned 1 [0052.937] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a058 | out: hHeap=0x570000) returned 1 [0052.937] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a038 | out: hHeap=0x570000) returned 1 [0052.937] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f68 | out: hHeap=0x570000) returned 1 [0052.937] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589928 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0a8 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a028 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0b8 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f58 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589568 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fd8 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fc8 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f48 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d398 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a018 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d128 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d1e8 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581490 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a088 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a078 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d960 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c698 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x583630 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d4d0 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d368 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579f68 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ce98 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588258 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c008 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589dc8 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f38 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a098 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a008 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589988 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e18 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ed8 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d68 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d98 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589868 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d88 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589db8 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ef8 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bc18 | out: hHeap=0x570000) returned 1 [0052.938] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e88 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579448 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b8b8 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5815d0 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ec8 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e68 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cbd8 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58bf68 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c748 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579430 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589808 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b4b8 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579538 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c6e8 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589eb8 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d78 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f08 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ee8 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5897a8 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589df8 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e38 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e58 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e78 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589688 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e28 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589dd8 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589da8 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5794d8 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e08 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e98 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d38 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e48 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5815b0 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ea8 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d28 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ba78 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581350 | out: hHeap=0x570000) returned 1 [0052.939] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58bc80 | out: hHeap=0x570000) returned 1 [0052.940] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d18 | out: hHeap=0x570000) returned 1 [0052.940] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588320 | out: hHeap=0x570000) returned 1 [0052.940] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a708 | out: hHeap=0x570000) returned 1 [0052.957] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x58ea68 [0052.962] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x58eb98 [0052.962] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x50) returned 0x58a4a0 [0052.962] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x50) returned 0x58a550 [0052.962] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x50) returned 0x58a600 [0052.962] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x50) returned 0x58a4f8 [0052.962] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x58e5a8 [0052.962] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xd6) returned 0x57bf48 [0052.962] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e5a8 | out: hHeap=0x570000) returned 1 [0052.962] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x140) returned 0x58ba78 [0052.962] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bf48 | out: hHeap=0x570000) returned 1 [0052.966] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x10ff5a8 | out: lpSystemTimeAsFileTime=0x10ff5a8*(dwLowDateTime=0x824e5200, dwHighDateTime=0x1d6ce14)) [0052.971] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ba78 | out: hHeap=0x570000) returned 1 [0052.971] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x90) returned 0x58e3e0 [0052.971] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xd6) returned 0x57bf48 [0052.971] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e3e0 | out: hHeap=0x570000) returned 1 [0052.971] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x140) returned 0x58ba78 [0052.971] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bf48 | out: hHeap=0x570000) returned 1 [0052.971] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a4f8 | out: hHeap=0x570000) returned 1 [0052.971] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a600 | out: hHeap=0x570000) returned 1 [0052.971] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a550 | out: hHeap=0x570000) returned 1 [0052.971] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a4a0 | out: hHeap=0x570000) returned 1 [0052.971] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58eb98 | out: hHeap=0x570000) returned 1 [0052.971] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ea68 | out: hHeap=0x570000) returned 1 [0052.971] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588258 [0052.971] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x30) returned 0x588908 [0052.971] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588258 | out: hHeap=0x570000) returned 1 [0052.971] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x46) returned 0x58c2d8 [0052.971] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588908 | out: hHeap=0x570000) returned 1 [0052.971] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x68) returned 0x575aa0 [0052.971] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c2d8 | out: hHeap=0x570000) returned 1 [0052.971] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x9a) returned 0x579f68 [0052.971] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x575aa0 | out: hHeap=0x570000) returned 1 [0052.971] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xe6) returned 0x57bf48 [0052.971] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579f68 | out: hHeap=0x570000) returned 1 [0052.971] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x158) returned 0x58bbc0 [0052.971] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bf48 | out: hHeap=0x570000) returned 1 [0052.971] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x202) returned 0x58c748 [0052.971] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58bbc0 | out: hHeap=0x570000) returned 1 [0052.971] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x583a30 [0052.971] GetLastError () returned 0xcb [0052.971] SetLastError (dwErrCode=0xcb) [0052.972] GetLastError () returned 0xcb [0052.972] SetLastError (dwErrCode=0xcb) [0052.972] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57bf48 [0052.972] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58c958 [0052.972] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c958 | out: hHeap=0x570000) returned 1 [0052.972] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0c8 | out: hHeap=0x570000) returned 1 [0052.972] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e1c8 | out: hHeap=0x570000) returned 1 [0052.972] GetLastError () returned 0xcb [0052.972] SetLastError (dwErrCode=0xcb) [0052.972] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589fb8 [0052.972] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x58a028 [0052.972] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589fe8 [0052.972] GetLastError () returned 0xcb [0052.972] SetLastError (dwErrCode=0xcb) [0052.972] GetLastError () returned 0xcb [0052.972] SetLastError (dwErrCode=0xcb) [0052.972] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57b428 [0052.972] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58c958 [0052.972] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c958 | out: hHeap=0x570000) returned 1 [0052.972] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fb8 | out: hHeap=0x570000) returned 1 [0052.972] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bf48 | out: hHeap=0x570000) returned 1 [0052.972] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fe8 | out: hHeap=0x570000) returned 1 [0052.972] GetLastError () returned 0xcb [0052.972] SetLastError (dwErrCode=0xcb) [0052.972] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589f98 [0052.972] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x58a048 [0052.972] GetLastError () returned 0xcb [0052.972] SetLastError (dwErrCode=0xcb) [0052.972] GetLastError () returned 0xcb [0052.972] SetLastError (dwErrCode=0xcb) [0052.973] GetLastError () returned 0xcb [0052.973] SetLastError (dwErrCode=0xcb) [0052.973] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589fb8 [0052.973] GetLastError () returned 0xcb [0052.973] SetLastError (dwErrCode=0xcb) [0052.973] GetLastError () returned 0xcb [0052.973] SetLastError (dwErrCode=0xcb) [0052.973] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57bf48 [0052.973] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58c958 [0052.973] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c958 | out: hHeap=0x570000) returned 1 [0052.973] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f98 | out: hHeap=0x570000) returned 1 [0052.973] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0052.973] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fb8 | out: hHeap=0x570000) returned 1 [0052.973] GetLastError () returned 0xcb [0052.973] SetLastError (dwErrCode=0xcb) [0052.973] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x58a088 [0052.973] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a048 | out: hHeap=0x570000) returned 1 [0052.973] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a028 | out: hHeap=0x570000) returned 1 [0052.973] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588258 [0052.973] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589f38 [0052.973] GetLastError () returned 0xcb [0052.973] SetLastError (dwErrCode=0xcb) [0052.973] GetLastError () returned 0xcb [0052.973] SetLastError (dwErrCode=0xcb) [0052.973] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57b428 [0052.973] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58c958 [0052.973] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c958 | out: hHeap=0x570000) returned 1 [0052.973] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a088 | out: hHeap=0x570000) returned 1 [0052.973] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bf48 | out: hHeap=0x570000) returned 1 [0052.974] GetLastError () returned 0xcb [0052.974] SetLastError (dwErrCode=0xcb) [0052.974] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x58a038 [0052.974] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589f68 [0052.974] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x58a0a8 [0052.974] GetLastError () returned 0xcb [0052.974] SetLastError (dwErrCode=0xcb) [0052.974] GetLastError () returned 0xcb [0052.974] SetLastError (dwErrCode=0xcb) [0052.974] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57bf48 [0052.974] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58c958 [0052.974] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c958 | out: hHeap=0x570000) returned 1 [0052.979] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a038 | out: hHeap=0x570000) returned 1 [0052.979] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0052.979] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0a8 | out: hHeap=0x570000) returned 1 [0052.979] GetLastError () returned 0xcb [0052.979] SetLastError (dwErrCode=0xcb) [0052.979] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589fe8 [0052.979] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x58a088 [0052.979] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581430 [0052.979] GetLastError () returned 0xcb [0052.979] SetLastError (dwErrCode=0xcb) [0052.979] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58c958 [0052.979] GetLastError () returned 0xcb [0052.979] SetLastError (dwErrCode=0xcb) [0052.979] GetLastError () returned 0xcb [0052.979] SetLastError (dwErrCode=0xcb) [0052.979] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xa0) returned 0x579f68 [0052.979] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589fd8 [0052.979] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f98 [0052.979] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581350 [0052.979] GetLastError () returned 0xcb [0052.979] SetLastError (dwErrCode=0xcb) [0052.979] GetLastError () returned 0xcb [0052.979] SetLastError (dwErrCode=0xcb) [0052.979] GetLastError () returned 0xcb [0052.979] SetLastError (dwErrCode=0xcb) [0052.979] GetLastError () returned 0xcb [0052.979] SetLastError (dwErrCode=0xcb) [0052.979] GetLastError () returned 0xcb [0052.980] SetLastError (dwErrCode=0xcb) [0052.980] GetLastError () returned 0xcb [0052.980] SetLastError (dwErrCode=0xcb) [0052.980] GetLastError () returned 0xcb [0052.980] SetLastError (dwErrCode=0xcb) [0052.980] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a098 [0052.980] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x6) returned 0x58a0b8 [0052.980] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x5) returned 0x589fa8 [0052.980] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f58 [0052.980] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x5794d8 [0052.980] GetLastError () returned 0xcb [0052.980] SetLastError (dwErrCode=0xcb) [0052.980] GetLastError () returned 0xcb [0052.980] SetLastError (dwErrCode=0xcb) [0052.980] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a058 [0052.980] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a008 [0052.980] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a068 [0052.980] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589bc8 [0052.980] GetLastError () returned 0xcb [0052.980] SetLastError (dwErrCode=0xcb) [0052.980] GetLastError () returned 0xcb [0052.980] SetLastError (dwErrCode=0xcb) [0052.980] GetLastError () returned 0xcb [0052.980] SetLastError (dwErrCode=0xcb) [0052.980] GetLastError () returned 0xcb [0052.980] SetLastError (dwErrCode=0xcb) [0052.980] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589fc8 [0052.980] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f78 [0052.980] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f88 [0052.980] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589fb8 [0052.981] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589568 [0052.981] GetLastError () returned 0xcb [0052.981] SetLastError (dwErrCode=0xcb) [0052.981] GetLastError () returned 0xcb [0052.981] SetLastError (dwErrCode=0xcb) [0052.981] GetLastError () returned 0xcb [0052.981] SetLastError (dwErrCode=0xcb) [0052.981] GetLastError () returned 0xcb [0052.981] SetLastError (dwErrCode=0xcb) [0052.981] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589ff8 [0052.981] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a018 [0052.981] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a038 [0052.981] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a048 [0052.981] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c2d8 [0052.981] GetLastError () returned 0xcb [0052.981] SetLastError (dwErrCode=0xcb) [0052.981] GetLastError () returned 0xcb [0052.981] SetLastError (dwErrCode=0xcb) [0052.981] GetLastError () returned 0xcb [0052.981] SetLastError (dwErrCode=0xcb) [0052.981] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589c28 [0052.981] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x5895c8 [0052.981] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589c28 | out: hHeap=0x570000) returned 1 [0052.981] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x56) returned 0x589c28 [0052.981] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x57b428 [0052.981] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x57b4b8 [0052.981] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0052.981] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x87) returned 0x57b428 [0052.981] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xd) returned 0x579538 [0052.981] GetLastError () returned 0xcb [0052.981] SetLastError (dwErrCode=0xcb) [0052.981] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10ff584, cchData=2 | out: lpLCData="0") returned 2 [0052.981] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x579430 [0052.982] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x58cb60 [0052.982] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c058 [0052.982] GetLastError () returned 0xcb [0052.982] SetLastError (dwErrCode=0xcb) [0052.982] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58cff0 [0052.982] GetLastError () returned 0xcb [0052.982] SetLastError (dwErrCode=0xcb) [0052.982] GetLastError () returned 0xcb [0052.982] SetLastError (dwErrCode=0xcb) [0052.982] GetLastError () returned 0xcb [0052.982] SetLastError (dwErrCode=0xcb) [0052.982] GetLastError () returned 0xcb [0052.982] SetLastError (dwErrCode=0xcb) [0052.982] GetLastError () returned 0xcb [0052.982] SetLastError (dwErrCode=0xcb) [0052.982] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f48 [0052.982] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a0a8 [0052.982] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5813d0 [0052.982] GetLastError () returned 0xcb [0052.982] SetLastError (dwErrCode=0xcb) [0052.982] GetLastError () returned 0xcb [0052.982] SetLastError (dwErrCode=0xcb) [0052.982] GetLastError () returned 0xcb [0052.982] SetLastError (dwErrCode=0xcb) [0052.982] GetLastError () returned 0xcb [0052.982] SetLastError (dwErrCode=0xcb) [0052.982] GetLastError () returned 0xcb [0052.982] SetLastError (dwErrCode=0xcb) [0052.982] GetLastError () returned 0xcb [0052.982] SetLastError (dwErrCode=0xcb) [0052.982] GetLastError () returned 0xcb [0052.983] SetLastError (dwErrCode=0xcb) [0052.983] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a028 [0052.983] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x579448 [0052.983] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x57b8b8 [0052.983] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x57bc18 [0052.983] GetLastError () returned 0xcb [0052.983] SetLastError (dwErrCode=0xcb) [0052.983] GetLastError () returned 0xcb [0052.983] SetLastError (dwErrCode=0xcb) [0052.983] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a078 [0052.983] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a0c8 [0052.983] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a0d8 [0052.983] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589688 [0052.983] GetLastError () returned 0xcb [0052.983] SetLastError (dwErrCode=0xcb) [0052.983] GetLastError () returned 0xcb [0052.983] SetLastError (dwErrCode=0xcb) [0052.983] GetLastError () returned 0xcb [0052.983] SetLastError (dwErrCode=0xcb) [0052.983] GetLastError () returned 0xcb [0052.983] SetLastError (dwErrCode=0xcb) [0052.983] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f18 [0052.983] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589f28 [0052.983] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589ec8 [0052.983] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589e18 [0052.983] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589b08 [0052.983] GetLastError () returned 0xcb [0052.984] SetLastError (dwErrCode=0xcb) [0052.984] GetLastError () returned 0xcb [0052.984] SetLastError (dwErrCode=0xcb) [0052.984] GetLastError () returned 0xcb [0052.984] SetLastError (dwErrCode=0xcb) [0052.984] GetLastError () returned 0xcb [0052.984] SetLastError (dwErrCode=0xcb) [0052.984] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589ed8 [0052.984] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589ee8 [0052.984] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d38 [0052.984] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589e48 [0052.984] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c148 [0052.984] GetLastError () returned 0xcb [0052.984] SetLastError (dwErrCode=0xcb) [0052.984] GetLastError () returned 0xcb [0052.984] SetLastError (dwErrCode=0xcb) [0052.984] GetLastError () returned 0xcb [0052.984] SetLastError (dwErrCode=0xcb) [0052.984] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x58bbc0 [0052.984] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x58d1f8 [0052.984] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58bbc0 | out: hHeap=0x570000) returned 1 [0052.984] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xac) returned 0x58bbc0 [0052.984] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10e) returned 0x58d2b0 [0052.984] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10e) returned 0x58d3c8 [0052.984] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d2b0 | out: hHeap=0x570000) returned 1 [0052.984] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10e) returned 0x58d2b0 [0052.984] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x588320 [0052.984] GetLastError () returned 0xcb [0052.984] SetLastError (dwErrCode=0xcb) [0052.984] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10ff570, cchData=2 | out: lpLCData="0") returned 2 [0052.984] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58d720 [0052.984] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x58d8e8 [0052.985] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x5834b0 [0052.985] GetLastError () returned 0xcb [0052.985] SetLastError (dwErrCode=0xcb) [0052.985] GetLastError () returned 0xcb [0052.985] SetLastError (dwErrCode=0xcb) [0052.985] GetLastError () returned 0xcb [0052.985] SetLastError (dwErrCode=0xcb) [0052.985] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c008 [0052.985] GetLastError () returned 0xcb [0052.985] SetLastError (dwErrCode=0xcb) [0052.985] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58dd78 [0052.985] GetLastError () returned 0xcb [0052.985] SetLastError (dwErrCode=0xcb) [0052.985] GetLastError () returned 0xcb [0052.985] SetLastError (dwErrCode=0xcb) [0052.985] GetLastError () returned 0xcb [0052.985] SetLastError (dwErrCode=0xcb) [0052.985] GetLastError () returned 0xcb [0052.985] SetLastError (dwErrCode=0xcb) [0052.985] GetLastError () returned 0xcb [0052.985] SetLastError (dwErrCode=0xcb) [0052.985] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d78 [0052.985] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d98 [0052.985] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581530 [0052.985] GetLastError () returned 0xcb [0052.985] SetLastError (dwErrCode=0xcb) [0052.985] GetLastError () returned 0xcb [0052.985] SetLastError (dwErrCode=0xcb) [0052.985] GetLastError () returned 0xcb [0052.985] SetLastError (dwErrCode=0xcb) [0052.985] GetLastError () returned 0xcb [0052.985] SetLastError (dwErrCode=0xcb) [0052.986] GetLastError () returned 0xcb [0052.986] SetLastError (dwErrCode=0xcb) [0052.986] GetLastError () returned 0xcb [0052.986] SetLastError (dwErrCode=0xcb) [0052.986] GetLastError () returned 0xcb [0052.986] SetLastError (dwErrCode=0xcb) [0052.986] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589eb8 [0052.986] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x58d528 [0052.986] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x58d6a8 [0052.986] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x58d690 [0052.986] GetLastError () returned 0xcb [0052.986] SetLastError (dwErrCode=0xcb) [0052.986] GetLastError () returned 0xcb [0052.986] SetLastError (dwErrCode=0xcb) [0052.986] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589db8 [0052.986] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d48 [0052.986] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e68 [0052.986] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x5897a8 [0052.986] GetLastError () returned 0xcb [0052.986] SetLastError (dwErrCode=0xcb) [0052.986] GetLastError () returned 0xcb [0052.986] SetLastError (dwErrCode=0xcb) [0052.986] GetLastError () returned 0xcb [0052.987] SetLastError (dwErrCode=0xcb) [0052.987] GetLastError () returned 0xcb [0052.987] SetLastError (dwErrCode=0xcb) [0052.987] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589d88 [0052.987] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589da8 [0052.987] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589ef8 [0052.987] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589f08 [0052.987] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589808 [0052.987] GetLastError () returned 0xcb [0052.987] SetLastError (dwErrCode=0xcb) [0052.987] GetLastError () returned 0xcb [0052.987] SetLastError (dwErrCode=0xcb) [0052.987] GetLastError () returned 0xcb [0052.987] SetLastError (dwErrCode=0xcb) [0052.987] GetLastError () returned 0xcb [0052.987] SetLastError (dwErrCode=0xcb) [0052.987] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e78 [0052.987] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589e38 [0052.987] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589ea8 [0052.987] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589e88 [0052.987] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c5a8 [0052.987] GetLastError () returned 0xcb [0052.987] SetLastError (dwErrCode=0xcb) [0052.987] GetLastError () returned 0xcb [0052.987] SetLastError (dwErrCode=0xcb) [0052.987] GetLastError () returned 0xcb [0052.988] SetLastError (dwErrCode=0xcb) [0052.988] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589b68 [0052.988] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5895c8 | out: hHeap=0x570000) returned 1 [0052.988] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589628 [0052.988] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589b68 | out: hHeap=0x570000) returned 1 [0052.988] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xac) returned 0x58df80 [0052.988] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x58bc78 [0052.988] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b4b8 | out: hHeap=0x570000) returned 1 [0052.988] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x57b4b8 [0052.988] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58bc78 | out: hHeap=0x570000) returned 1 [0052.988] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10e) returned 0x58e038 [0052.988] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x588348 [0052.988] GetLastError () returned 0xcb [0052.988] SetLastError (dwErrCode=0xcb) [0052.988] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10ff560, cchData=2 | out: lpLCData="0") returned 2 [0052.988] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58d768 [0052.988] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x58f290 [0052.988] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x5834f0 [0052.988] GetLastError () returned 0xcb [0052.988] SetLastError (dwErrCode=0xcb) [0052.988] GetLastError () returned 0xcb [0052.988] SetLastError (dwErrCode=0xcb) [0052.988] GetLastError () returned 0xcb [0052.988] SetLastError (dwErrCode=0xcb) [0052.988] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f38 | out: hHeap=0x570000) returned 1 [0052.988] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589f38 [0052.988] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589d58 [0052.988] GetLastError () returned 0xcb [0052.988] SetLastError (dwErrCode=0xcb) [0052.988] GetLastError () returned 0xcb [0052.988] SetLastError (dwErrCode=0xcb) [0052.989] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e150 [0052.989] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f720 [0052.989] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f720 | out: hHeap=0x570000) returned 1 [0052.989] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fe8 | out: hHeap=0x570000) returned 1 [0052.989] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bf48 | out: hHeap=0x570000) returned 1 [0052.989] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d58 | out: hHeap=0x570000) returned 1 [0052.989] GetLastError () returned 0xcb [0052.989] SetLastError (dwErrCode=0xcb) [0052.989] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589d18 [0052.989] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a088 | out: hHeap=0x570000) returned 1 [0052.989] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f68 | out: hHeap=0x570000) returned 1 [0052.989] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d3c8 | out: hHeap=0x570000) returned 1 [0052.989] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d1f8 | out: hHeap=0x570000) returned 1 [0052.989] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b4b8 | out: hHeap=0x570000) returned 1 [0052.989] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589628 | out: hHeap=0x570000) returned 1 [0052.989] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5834b0 | out: hHeap=0x570000) returned 1 [0052.989] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f38 | out: hHeap=0x570000) returned 1 [0052.989] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x58a088 [0052.989] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588370 [0052.989] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x30) returned 0x5889b0 [0052.989] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588370 | out: hHeap=0x570000) returned 1 [0052.989] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x47) returned 0x58c558 [0052.989] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5889b0 | out: hHeap=0x570000) returned 1 [0052.989] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a) returned 0x58e210 [0052.989] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c558 | out: hHeap=0x570000) returned 1 [0052.989] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x9e) returned 0x58bc78 [0052.989] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e210 | out: hHeap=0x570000) returned 1 [0052.989] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xec) returned 0x57bf48 [0052.989] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58bc78 | out: hHeap=0x570000) returned 1 [0052.989] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5834f0 | out: hHeap=0x570000) returned 1 [0052.989] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0052.989] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d768 | out: hHeap=0x570000) returned 1 [0052.990] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58df80 | out: hHeap=0x570000) returned 1 [0052.990] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e038 | out: hHeap=0x570000) returned 1 [0052.990] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588348 | out: hHeap=0x570000) returned 1 [0052.990] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c5a8 | out: hHeap=0x570000) returned 1 [0052.990] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e78 | out: hHeap=0x570000) returned 1 [0052.990] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e38 | out: hHeap=0x570000) returned 1 [0052.990] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ea8 | out: hHeap=0x570000) returned 1 [0052.990] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e88 | out: hHeap=0x570000) returned 1 [0052.990] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589808 | out: hHeap=0x570000) returned 1 [0052.990] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d88 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589da8 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ef8 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f08 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5897a8 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e68 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d48 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589db8 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d690 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589eb8 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d528 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d6a8 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581530 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d98 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d78 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58dd78 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c008 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x583a30 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d8e8 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d720 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58bbc0 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d2b0 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588320 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c148 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ed8 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ee8 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d38 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e48 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589b08 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f18 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f28 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ec8 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e18 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589688 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0d8 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0c8 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a078 | out: hHeap=0x570000) returned 1 [0052.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bc18 | out: hHeap=0x570000) returned 1 [0052.992] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a028 | out: hHeap=0x570000) returned 1 [0052.992] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579448 | out: hHeap=0x570000) returned 1 [0052.992] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588370 [0052.992] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588488 [0053.028] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName="UvuvwevwevweOnyetenyevweUgwemuhwemOsas") returned 0x20c [0053.028] GetLastError () returned 0x0 [0053.028] AllocConsole () returned 0 [0053.029] FindWindowA (lpClassName="ConsoleWindowClass", lpWindowName=0x0) returned 0x302d2 [0053.029] ShowWindow (hWnd=0x302d2, nCmdShow=0) returned 0 [0053.034] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0053.034] VirtualProtect (in: lpAddress=0x400000, dwSize=0x400, flNewProtect=0x40, lpflOldProtect=0x10fe4bc | out: lpflOldProtect=0x10fe4bc*=0x40) returned 1 [0053.048] VirtualProtect (in: lpAddress=0x400000, dwSize=0x400, flNewProtect=0x40, lpflOldProtect=0x10fe4bc | out: lpflOldProtect=0x10fe4bc*=0x40) returned 1 [0053.078] InitializeProcThreadAttributeList (in: lpAttributeList=0x0, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x10fe4b0 | out: lpAttributeList=0x0, lpSize=0x10fe4b0) returned 0 [0053.078] GetProcessHeap () returned 0x570000 [0053.078] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x20) returned 0x588320 [0053.078] InitializeProcThreadAttributeList (in: lpAttributeList=0x588320, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x10fe4b0 | out: lpAttributeList=0x588320, lpSize=0x10fe4b0) returned 1 [0053.078] UpdateProcThreadAttribute (in: lpAttributeList=0x588320, dwFlags=0x0, Attribute=0x20007, lpValue=0x10fe4b4, cbSize=0x8, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x588320, lpPreviousValue=0x0) returned 1 [0053.078] GetProcessHeap () returned 0x570000 [0053.078] HeapFree (in: hHeap=0x570000, dwFlags=0x8, lpMem=0x588320 | out: hHeap=0x570000) returned 1 [0053.078] SetProcessMitigationPolicy (MitigationPolicy=0x8, lpBuffer=0x10fe4bc, dwLength=0x4) returned 1 [0053.083] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588258 [0053.083] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588320 [0053.083] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588348 [0053.083] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588370 [0053.083] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588460 [0053.083] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588398 [0053.083] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588410 [0053.083] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588488 [0053.083] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588438 [0053.083] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d670 [0053.083] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d710 [0053.083] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d580 [0053.083] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d5a8 [0053.083] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d620 [0053.083] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d760 [0053.083] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d5d0 [0053.083] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d7b0 [0053.084] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d850 [0053.084] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x30) returned 0x588630 [0053.084] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d558 [0053.084] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x30) returned 0x588b00 [0053.084] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d788 [0053.084] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d5f8 [0053.084] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d738 [0053.084] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d7d8 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d800 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d648 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d698 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d878 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d6c0 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d6e8 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x30) returned 0x588c18 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x30) returned 0x588748 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d828 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d8a0 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d508 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d530 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x390) returned 0x58d8e8 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58ce80 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58ce08 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cd68 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cde0 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58ce30 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cc78 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58ced0 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58ce58 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cea8 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cca0 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cef8 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cf20 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cd18 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cd90 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cdb8 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58ccc8 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58ccf0 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cd40 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x30) returned 0x588908 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58ca98 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x30) returned 0x588a90 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58c908 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cb88 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58c868 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cc50 [0053.085] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cc00 [0053.086] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58c778 [0053.086] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58c8b8 [0053.086] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cc28 [0053.086] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58c930 [0053.086] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58c980 [0053.086] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x30) returned 0x5886d8 [0053.086] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x30) returned 0x588550 [0053.086] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58ca48 [0053.086] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cbb0 [0053.086] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58c9a8 [0053.086] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58ca20 [0053.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d530 | out: hHeap=0x570000) returned 1 [0053.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d508 | out: hHeap=0x570000) returned 1 [0053.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d8a0 | out: hHeap=0x570000) returned 1 [0053.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d828 | out: hHeap=0x570000) returned 1 [0053.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588748 | out: hHeap=0x570000) returned 1 [0053.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588c18 | out: hHeap=0x570000) returned 1 [0053.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d6e8 | out: hHeap=0x570000) returned 1 [0053.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d6c0 | out: hHeap=0x570000) returned 1 [0053.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d878 | out: hHeap=0x570000) returned 1 [0053.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d698 | out: hHeap=0x570000) returned 1 [0053.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d648 | out: hHeap=0x570000) returned 1 [0053.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d800 | out: hHeap=0x570000) returned 1 [0053.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d7d8 | out: hHeap=0x570000) returned 1 [0053.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d738 | out: hHeap=0x570000) returned 1 [0053.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d5f8 | out: hHeap=0x570000) returned 1 [0053.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d788 | out: hHeap=0x570000) returned 1 [0053.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588b00 | out: hHeap=0x570000) returned 1 [0053.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d558 | out: hHeap=0x570000) returned 1 [0053.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588630 | out: hHeap=0x570000) returned 1 [0053.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d850 | out: hHeap=0x570000) returned 1 [0053.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d7b0 | out: hHeap=0x570000) returned 1 [0053.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d5d0 | out: hHeap=0x570000) returned 1 [0053.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d760 | out: hHeap=0x570000) returned 1 [0053.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d620 | out: hHeap=0x570000) returned 1 [0053.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d5a8 | out: hHeap=0x570000) returned 1 [0053.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d580 | out: hHeap=0x570000) returned 1 [0053.086] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d710 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d670 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588438 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588488 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588410 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588398 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588460 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588370 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588348 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588320 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588258 | out: hHeap=0x570000) returned 1 [0053.087] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58c7a0 [0053.087] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581510 [0053.087] GetModuleHandleW (lpModuleName="api_log.dll") returned 0x0 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c7a0 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ce80 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ce08 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cd68 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cde0 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ce30 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cc78 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ced0 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ce58 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cea8 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cca0 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cef8 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cf20 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cd18 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cd90 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cdb8 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ccc8 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ccf0 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cd40 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588908 | out: hHeap=0x570000) returned 1 [0053.087] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ca98 | out: hHeap=0x570000) returned 1 [0053.088] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588a90 | out: hHeap=0x570000) returned 1 [0053.088] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c908 | out: hHeap=0x570000) returned 1 [0053.088] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cb88 | out: hHeap=0x570000) returned 1 [0053.088] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c868 | out: hHeap=0x570000) returned 1 [0053.088] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cc50 | out: hHeap=0x570000) returned 1 [0053.088] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cc00 | out: hHeap=0x570000) returned 1 [0053.088] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c778 | out: hHeap=0x570000) returned 1 [0053.088] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c8b8 | out: hHeap=0x570000) returned 1 [0053.088] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cc28 | out: hHeap=0x570000) returned 1 [0053.088] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c930 | out: hHeap=0x570000) returned 1 [0053.088] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c980 | out: hHeap=0x570000) returned 1 [0053.088] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5886d8 | out: hHeap=0x570000) returned 1 [0053.088] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588550 | out: hHeap=0x570000) returned 1 [0053.088] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ca48 | out: hHeap=0x570000) returned 1 [0053.088] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cbb0 | out: hHeap=0x570000) returned 1 [0053.088] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c9a8 | out: hHeap=0x570000) returned 1 [0053.088] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ca20 | out: hHeap=0x570000) returned 1 [0053.109] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d8e8 | out: hHeap=0x570000) returned 1 [0053.109] GlobalMemoryStatusEx (in: lpBuffer=0x10fe47c | out: lpBuffer=0x10fe47c) returned 1 [0053.109] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x30) returned 0x5886d8 [0053.109] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588258 [0053.109] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588438 [0053.109] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588410 [0053.109] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588460 [0053.109] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x30) returned 0x588908 [0053.109] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588320 [0053.109] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588348 [0053.109] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588488 [0053.109] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588370 [0053.109] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x588398 [0053.109] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cbb0 [0053.109] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58c868 [0053.109] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58ca48 [0053.109] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58c818 [0053.109] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58c840 [0053.109] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cb88 [0053.109] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58c980 [0053.109] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cbd8 [0053.109] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cb38 [0053.109] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cc00 [0053.109] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58c890 [0053.109] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58ca70 [0053.109] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58c7c8 [0053.109] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58c908 [0053.109] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cc28 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58c7f0 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58c958 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58c9a8 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58c8b8 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cc50 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58ca20 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cb60 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58c8e0 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58ca98 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58c930 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cae8 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x30) returned 0x588940 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58c9d0 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cb10 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58c9f8 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cac0 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58c778 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58c7a0 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cd40 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cd90 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cea8 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cef8 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58ce30 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58ce08 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58ce80 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x528) returned 0x58cf50 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x30) returned 0x5887f0 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58ce58 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cde0 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58ced0 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cf20 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x30) returned 0x5885f8 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cd68 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cc78 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cd18 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58ccc8 [0053.110] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cdb8 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58cca0 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58ccf0 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d6c0 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d800 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d508 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d6e8 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d620 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d788 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d670 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d828 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d850 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d558 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d7b0 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d5d0 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d878 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d710 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d8a0 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d5f8 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d738 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d648 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d530 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d580 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d5a8 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d7d8 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d760 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d698 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x30) returned 0x588a90 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58de40 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58dfd0 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58dee0 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58de90 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58dfa8 [0053.111] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58de18 [0053.112] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58deb8 [0053.112] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58df30 [0053.112] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58e020 [0053.112] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58e048 [0053.112] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58df80 [0053.112] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58de68 [0053.112] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58df58 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ce80 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ce08 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ce30 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cef8 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cea8 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cd90 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cd40 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c7a0 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c778 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cac0 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c9f8 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cb10 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c9d0 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588940 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cae8 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c930 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ca98 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c8e0 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cb60 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ca20 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cc50 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c8b8 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c9a8 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c958 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c7f0 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cc28 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c908 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c7c8 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ca70 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c890 | out: hHeap=0x570000) returned 1 [0053.112] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cc00 | out: hHeap=0x570000) returned 1 [0053.113] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cb38 | out: hHeap=0x570000) returned 1 [0053.113] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cbd8 | out: hHeap=0x570000) returned 1 [0053.113] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c980 | out: hHeap=0x570000) returned 1 [0053.113] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cb88 | out: hHeap=0x570000) returned 1 [0053.113] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c840 | out: hHeap=0x570000) returned 1 [0053.113] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c818 | out: hHeap=0x570000) returned 1 [0053.113] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ca48 | out: hHeap=0x570000) returned 1 [0053.113] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c868 | out: hHeap=0x570000) returned 1 [0053.113] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58cbb0 | out: hHeap=0x570000) returned 1 [0053.113] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588398 | out: hHeap=0x570000) returned 1 [0053.113] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588370 | out: hHeap=0x570000) returned 1 [0053.113] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588488 | out: hHeap=0x570000) returned 1 [0053.113] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588348 | out: hHeap=0x570000) returned 1 [0053.113] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588320 | out: hHeap=0x570000) returned 1 [0053.113] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588908 | out: hHeap=0x570000) returned 1 [0053.113] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588460 | out: hHeap=0x570000) returned 1 [0053.113] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588410 | out: hHeap=0x570000) returned 1 [0053.113] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588438 | out: hHeap=0x570000) returned 1 [0053.113] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588258 | out: hHeap=0x570000) returned 1 [0053.113] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5886d8 | out: hHeap=0x570000) returned 1 [0053.113] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x30) returned 0x588be0 [0053.113] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58dff8 [0053.113] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58e070 [0053.113] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58dff8 | out: hHeap=0x570000) returned 1 [0053.113] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58dff8 [0053.113] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58e098 [0053.113] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58dff8 | out: hHeap=0x570000) returned 1 [0053.113] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x5834b0 [0053.113] GetLastError () returned 0x7e [0053.113] SetLastError (dwErrCode=0x7e) [0053.113] GetLastError () returned 0x7e [0053.113] SetLastError (dwErrCode=0x7e) [0053.114] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57b428 [0053.114] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0053.114] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0053.114] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d18 | out: hHeap=0x570000) returned 1 [0053.114] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e150 | out: hHeap=0x570000) returned 1 [0053.114] GetLastError () returned 0x7e [0053.114] SetLastError (dwErrCode=0x7e) [0053.114] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x58a0c8 [0053.114] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589fd8 [0053.114] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x58a098 [0053.114] GetLastError () returned 0x7e [0053.114] SetLastError (dwErrCode=0x7e) [0053.114] GetLastError () returned 0x7e [0053.114] SetLastError (dwErrCode=0x7e) [0053.114] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e0f0 [0053.114] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0053.114] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0053.114] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0c8 | out: hHeap=0x570000) returned 1 [0053.114] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0053.114] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a098 | out: hHeap=0x570000) returned 1 [0053.114] GetLastError () returned 0x7e [0053.114] SetLastError (dwErrCode=0x7e) [0053.114] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589f98 [0053.114] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589fe8 [0053.114] GetLastError () returned 0x7e [0053.114] SetLastError (dwErrCode=0x7e) [0053.114] GetLastError () returned 0x7e [0053.114] SetLastError (dwErrCode=0x7e) [0053.114] GetLastError () returned 0x7e [0053.114] SetLastError (dwErrCode=0x7e) [0053.115] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589fb8 [0053.115] GetLastError () returned 0x7e [0053.115] SetLastError (dwErrCode=0x7e) [0053.115] GetLastError () returned 0x7e [0053.115] SetLastError (dwErrCode=0x7e) [0053.115] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e1b0 [0053.115] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0053.115] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0053.115] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f98 | out: hHeap=0x570000) returned 1 [0053.115] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0053.115] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fb8 | out: hHeap=0x570000) returned 1 [0053.115] GetLastError () returned 0x7e [0053.115] SetLastError (dwErrCode=0x7e) [0053.115] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589f78 [0053.115] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fe8 | out: hHeap=0x570000) returned 1 [0053.115] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fd8 | out: hHeap=0x570000) returned 1 [0053.115] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58df08 [0053.115] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589f58 [0053.115] GetLastError () returned 0x7e [0053.115] SetLastError (dwErrCode=0x7e) [0053.115] GetLastError () returned 0x7e [0053.115] SetLastError (dwErrCode=0x7e) [0053.115] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e0f0 [0053.115] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0053.115] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0053.116] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f78 | out: hHeap=0x570000) returned 1 [0053.116] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e1b0 | out: hHeap=0x570000) returned 1 [0053.116] GetLastError () returned 0x7e [0053.116] SetLastError (dwErrCode=0x7e) [0053.116] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x58a098 [0053.116] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589ff8 [0053.116] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x58a078 [0053.116] GetLastError () returned 0x7e [0053.116] SetLastError (dwErrCode=0x7e) [0053.116] GetLastError () returned 0x7e [0053.116] SetLastError (dwErrCode=0x7e) [0053.116] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e1b0 [0053.116] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0053.116] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0053.116] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a098 | out: hHeap=0x570000) returned 1 [0053.116] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0053.116] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a078 | out: hHeap=0x570000) returned 1 [0053.116] GetLastError () returned 0x7e [0053.116] SetLastError (dwErrCode=0x7e) [0053.116] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x58a0b8 [0053.116] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x58a098 [0053.116] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5813d0 [0053.116] GetLastError () returned 0x7e [0053.116] SetLastError (dwErrCode=0x7e) [0053.116] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58ba78 [0053.116] GetLastError () returned 0x7e [0053.116] SetLastError (dwErrCode=0x7e) [0053.116] GetLastError () returned 0x7e [0053.116] SetLastError (dwErrCode=0x7e) [0053.116] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xa0) returned 0x58bc80 [0053.117] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a028 [0053.117] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f88 [0053.117] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581350 [0053.117] GetLastError () returned 0x7e [0053.117] SetLastError (dwErrCode=0x7e) [0053.117] GetLastError () returned 0x7e [0053.117] SetLastError (dwErrCode=0x7e) [0053.117] GetLastError () returned 0x7e [0053.117] SetLastError (dwErrCode=0x7e) [0053.117] GetLastError () returned 0x7e [0053.117] SetLastError (dwErrCode=0x7e) [0053.117] GetLastError () returned 0x7e [0053.117] SetLastError (dwErrCode=0x7e) [0053.117] GetLastError () returned 0x7e [0053.117] SetLastError (dwErrCode=0x7e) [0053.117] GetLastError () returned 0x7e [0053.117] SetLastError (dwErrCode=0x7e) [0053.117] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f18 [0053.117] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x6) returned 0x589fb8 [0053.117] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x5) returned 0x58a068 [0053.117] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a0a8 [0053.117] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x579448 [0053.117] GetLastError () returned 0x7e [0053.117] SetLastError (dwErrCode=0x7e) [0053.117] GetLastError () returned 0x7e [0053.117] SetLastError (dwErrCode=0x7e) [0053.117] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f78 [0053.117] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f98 [0053.118] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589fa8 [0053.118] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589b68 [0053.118] GetLastError () returned 0x7e [0053.118] SetLastError (dwErrCode=0x7e) [0053.118] GetLastError () returned 0x7e [0053.118] SetLastError (dwErrCode=0x7e) [0053.118] GetLastError () returned 0x7e [0053.118] SetLastError (dwErrCode=0x7e) [0053.118] GetLastError () returned 0x7e [0053.118] SetLastError (dwErrCode=0x7e) [0053.118] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f38 [0053.118] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a018 [0053.118] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a008 [0053.118] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589fc8 [0053.118] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589568 [0053.118] GetLastError () returned 0x7e [0053.118] SetLastError (dwErrCode=0x7e) [0053.118] GetLastError () returned 0x7e [0053.118] SetLastError (dwErrCode=0x7e) [0053.118] GetLastError () returned 0x7e [0053.118] SetLastError (dwErrCode=0x7e) [0053.118] GetLastError () returned 0x7e [0053.118] SetLastError (dwErrCode=0x7e) [0053.118] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a058 [0053.118] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589fd8 [0053.118] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589fe8 [0053.118] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a038 [0053.118] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c5f8 [0053.118] GetLastError () returned 0x7e [0053.118] SetLastError (dwErrCode=0x7e) [0053.118] GetLastError () returned 0x7e [0053.118] SetLastError (dwErrCode=0x7e) [0053.119] GetLastError () returned 0x7e [0053.119] SetLastError (dwErrCode=0x7e) [0053.119] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589c88 [0053.119] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x5897a8 [0053.119] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589c88 | out: hHeap=0x570000) returned 1 [0053.119] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x56) returned 0x589a48 [0053.119] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x579f68 [0053.119] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x58e0f0 [0053.119] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579f68 | out: hHeap=0x570000) returned 1 [0053.119] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x87) returned 0x579f68 [0053.119] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xd) returned 0x579538 [0053.119] GetLastError () returned 0x7e [0053.119] SetLastError (dwErrCode=0x7e) [0053.119] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda68, cchData=2 | out: lpLCData="0") returned 2 [0053.119] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x579430 [0053.119] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x58f290 [0053.119] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c558 [0053.119] GetLastError () returned 0x7e [0053.119] SetLastError (dwErrCode=0x7e) [0053.119] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58f720 [0053.119] GetLastError () returned 0x7e [0053.119] SetLastError (dwErrCode=0x7e) [0053.119] GetLastError () returned 0x7e [0053.119] SetLastError (dwErrCode=0x7e) [0053.119] GetLastError () returned 0x7e [0053.119] SetLastError (dwErrCode=0x7e) [0053.119] GetLastError () returned 0x7e [0053.119] SetLastError (dwErrCode=0x7e) [0053.119] GetLastError () returned 0x7e [0053.119] SetLastError (dwErrCode=0x7e) [0053.120] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a0c8 [0053.120] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a0d8 [0053.120] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5814d0 [0053.120] GetLastError () returned 0x7e [0053.120] SetLastError (dwErrCode=0x7e) [0053.120] GetLastError () returned 0x7e [0053.120] SetLastError (dwErrCode=0x7e) [0053.120] GetLastError () returned 0x7e [0053.120] SetLastError (dwErrCode=0x7e) [0053.120] GetLastError () returned 0x7e [0053.120] SetLastError (dwErrCode=0x7e) [0053.120] GetLastError () returned 0x7e [0053.120] SetLastError (dwErrCode=0x7e) [0053.120] GetLastError () returned 0x7e [0053.120] SetLastError (dwErrCode=0x7e) [0053.120] GetLastError () returned 0x7e [0053.120] SetLastError (dwErrCode=0x7e) [0053.120] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f48 [0053.120] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x5794d8 [0053.120] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x57b8b8 [0053.120] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x57bc18 [0053.120] GetLastError () returned 0x7e [0053.120] SetLastError (dwErrCode=0x7e) [0053.120] GetLastError () returned 0x7e [0053.120] SetLastError (dwErrCode=0x7e) [0053.120] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f68 [0053.120] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f28 [0053.121] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a048 [0053.121] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589bc8 [0053.121] GetLastError () returned 0x7e [0053.121] SetLastError (dwErrCode=0x7e) [0053.121] GetLastError () returned 0x7e [0053.121] SetLastError (dwErrCode=0x7e) [0053.121] GetLastError () returned 0x7e [0053.121] SetLastError (dwErrCode=0x7e) [0053.121] GetLastError () returned 0x7e [0053.121] SetLastError (dwErrCode=0x7e) [0053.121] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a078 [0053.121] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a088 [0053.121] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589db8 [0053.121] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589e48 [0053.121] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589688 [0053.121] GetLastError () returned 0x7e [0053.121] SetLastError (dwErrCode=0x7e) [0053.121] GetLastError () returned 0x7e [0053.121] SetLastError (dwErrCode=0x7e) [0053.121] GetLastError () returned 0x7e [0053.121] SetLastError (dwErrCode=0x7e) [0053.121] GetLastError () returned 0x7e [0053.121] SetLastError (dwErrCode=0x7e) [0053.121] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589d68 [0053.121] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589eb8 [0053.121] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589de8 [0053.121] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589ef8 [0053.121] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c2d8 [0053.121] GetLastError () returned 0x7e [0053.121] SetLastError (dwErrCode=0x7e) [0053.121] GetLastError () returned 0x7e [0053.121] SetLastError (dwErrCode=0x7e) [0053.121] GetLastError () returned 0x7e [0053.122] SetLastError (dwErrCode=0x7e) [0053.122] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x57b428 [0053.122] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x58f928 [0053.122] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0053.122] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xac) returned 0x57b428 [0053.122] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10e) returned 0x58f9e0 [0053.122] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10e) returned 0x58faf8 [0053.122] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f9e0 | out: hHeap=0x570000) returned 1 [0053.122] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10e) returned 0x58f9e0 [0053.122] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x58e0c0 [0053.122] GetLastError () returned 0x7e [0053.122] SetLastError (dwErrCode=0x7e) [0053.122] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda54, cchData=2 | out: lpLCData="0") returned 2 [0053.122] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58fd60 [0053.122] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x590018 [0053.122] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x583a30 [0053.122] GetLastError () returned 0x7e [0053.122] SetLastError (dwErrCode=0x7e) [0053.122] GetLastError () returned 0x7e [0053.122] SetLastError (dwErrCode=0x7e) [0053.122] GetLastError () returned 0x7e [0053.122] SetLastError (dwErrCode=0x7e) [0053.122] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c328 [0053.122] GetLastError () returned 0x7e [0053.122] SetLastError (dwErrCode=0x7e) [0053.122] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x5904a8 [0053.122] GetLastError () returned 0x7e [0053.122] SetLastError (dwErrCode=0x7e) [0053.122] GetLastError () returned 0x7e [0053.122] SetLastError (dwErrCode=0x7e) [0053.122] GetLastError () returned 0x7e [0053.122] SetLastError (dwErrCode=0x7e) [0053.122] GetLastError () returned 0x7e [0053.123] SetLastError (dwErrCode=0x7e) [0053.123] GetLastError () returned 0x7e [0053.123] SetLastError (dwErrCode=0x7e) [0053.123] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d48 [0053.123] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e58 [0053.123] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581530 [0053.123] GetLastError () returned 0x7e [0053.123] SetLastError (dwErrCode=0x7e) [0053.123] GetLastError () returned 0x7e [0053.123] SetLastError (dwErrCode=0x7e) [0053.123] GetLastError () returned 0x7e [0053.123] SetLastError (dwErrCode=0x7e) [0053.123] GetLastError () returned 0x7e [0053.123] SetLastError (dwErrCode=0x7e) [0053.123] GetLastError () returned 0x7e [0053.123] SetLastError (dwErrCode=0x7e) [0053.123] GetLastError () returned 0x7e [0053.123] SetLastError (dwErrCode=0x7e) [0053.123] GetLastError () returned 0x7e [0053.123] SetLastError (dwErrCode=0x7e) [0053.123] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e08 [0053.123] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x58fd78 [0053.123] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x58fd30 [0053.123] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x58fe20 [0053.123] GetLastError () returned 0x7e [0053.123] SetLastError (dwErrCode=0x7e) [0053.123] GetLastError () returned 0x7e [0053.123] SetLastError (dwErrCode=0x7e) [0053.124] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d78 [0053.124] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e88 [0053.124] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589ed8 [0053.124] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589628 [0053.124] GetLastError () returned 0x7e [0053.124] SetLastError (dwErrCode=0x7e) [0053.124] GetLastError () returned 0x7e [0053.124] SetLastError (dwErrCode=0x7e) [0053.124] GetLastError () returned 0x7e [0053.124] SetLastError (dwErrCode=0x7e) [0053.124] GetLastError () returned 0x7e [0053.124] SetLastError (dwErrCode=0x7e) [0053.124] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589d38 [0053.124] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589ec8 [0053.124] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589e78 [0053.124] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589d58 [0053.124] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589988 [0053.124] GetLastError () returned 0x7e [0053.124] SetLastError (dwErrCode=0x7e) [0053.124] GetLastError () returned 0x7e [0053.124] SetLastError (dwErrCode=0x7e) [0053.124] GetLastError () returned 0x7e [0053.124] SetLastError (dwErrCode=0x7e) [0053.124] GetLastError () returned 0x7e [0053.124] SetLastError (dwErrCode=0x7e) [0053.124] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e68 [0053.124] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589e98 [0053.124] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d88 [0053.124] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589d98 [0053.125] GetLastError () returned 0x7e [0053.125] SetLastError (dwErrCode=0x7e) [0053.125] GetLastError () returned 0x7e [0053.125] SetLastError (dwErrCode=0x7e) [0053.125] GetLastError () returned 0x7e [0053.125] SetLastError (dwErrCode=0x7e) [0053.125] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5897a8 | out: hHeap=0x570000) returned 1 [0053.125] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589808 | out: hHeap=0x570000) returned 1 [0053.125] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xac) returned 0x5906b0 [0053.125] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0053.125] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590768 | out: hHeap=0x570000) returned 1 [0053.125] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10e) returned 0x590768 [0053.125] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x58dff8 [0053.125] GetLastError () returned 0x7e [0053.125] SetLastError (dwErrCode=0x7e) [0053.125] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda44, cchData=2 | out: lpLCData="0") returned 2 [0053.125] GetLastError () returned 0x7e [0053.125] SetLastError (dwErrCode=0x7e) [0053.125] GetLastError () returned 0x7e [0053.125] SetLastError (dwErrCode=0x7e) [0053.125] GetLastError () returned 0x7e [0053.125] SetLastError (dwErrCode=0x7e) [0053.125] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f58 | out: hHeap=0x570000) returned 1 [0053.125] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589da8 [0053.125] GetLastError () returned 0x7e [0053.125] SetLastError (dwErrCode=0x7e) [0053.125] GetLastError () returned 0x7e [0053.126] SetLastError (dwErrCode=0x7e) [0053.126] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x590d10 [0053.126] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590dd0 | out: hHeap=0x570000) returned 1 [0053.126] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0b8 | out: hHeap=0x570000) returned 1 [0053.126] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e1b0 | out: hHeap=0x570000) returned 1 [0053.126] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589da8 | out: hHeap=0x570000) returned 1 [0053.126] GetLastError () returned 0x7e [0053.126] SetLastError (dwErrCode=0x7e) [0053.126] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a098 | out: hHeap=0x570000) returned 1 [0053.126] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ff8 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58faf8 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f928 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5898c8 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x583a30 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f58 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58dcb0 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588940 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58daf8 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5834f0 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590880 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fd18 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5906b0 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590768 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58dff8 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c698 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e68 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e98 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d88 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d98 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589988 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d38 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ec8 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e78 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d58 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589628 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ed8 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e88 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d78 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fe20 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e08 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fd78 | out: hHeap=0x570000) returned 1 [0053.127] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fd30 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581530 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e58 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d48 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5904a8 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c328 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5834b0 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590018 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fd60 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f9e0 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0c0 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c2d8 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d68 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589eb8 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589de8 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ef8 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589688 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a078 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a088 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589db8 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e48 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589bc8 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a048 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f28 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f68 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bc18 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f48 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5794d8 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b8b8 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5814d0 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0d8 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0c8 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f720 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c558 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579430 | out: hHeap=0x570000) returned 1 [0053.128] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589a48 | out: hHeap=0x570000) returned 1 [0053.129] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579f68 | out: hHeap=0x570000) returned 1 [0053.129] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579538 | out: hHeap=0x570000) returned 1 [0053.129] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c5f8 | out: hHeap=0x570000) returned 1 [0053.129] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a058 | out: hHeap=0x570000) returned 1 [0053.129] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fd8 | out: hHeap=0x570000) returned 1 [0053.129] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fe8 | out: hHeap=0x570000) returned 1 [0053.129] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a038 | out: hHeap=0x570000) returned 1 [0053.129] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589568 | out: hHeap=0x570000) returned 1 [0053.129] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f38 | out: hHeap=0x570000) returned 1 [0053.129] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a018 | out: hHeap=0x570000) returned 1 [0053.129] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a008 | out: hHeap=0x570000) returned 1 [0053.129] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fc8 | out: hHeap=0x570000) returned 1 [0053.129] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589b68 | out: hHeap=0x570000) returned 1 [0053.129] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fa8 | out: hHeap=0x570000) returned 1 [0053.129] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f98 | out: hHeap=0x570000) returned 1 [0053.129] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x218 [0053.178] Process32FirstW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0053.178] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0053.179] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0053.180] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0053.182] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0053.183] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0053.184] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0053.185] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0053.186] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0053.187] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.187] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0053.188] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0053.189] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.205] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0053.206] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x54, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.207] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.207] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.208] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.209] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.210] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.211] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.212] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.213] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.214] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.214] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0053.215] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.216] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0053.217] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0053.218] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.219] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0053.220] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0053.221] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0053.222] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0053.222] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0053.223] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0053.224] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0053.225] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0053.226] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0053.227] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending-windsor.exe")) returned 1 [0053.228] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="workers_offline_scripts.exe")) returned 1 [0053.229] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sharesamerican.exe")) returned 1 [0053.230] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x764, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="clara-cancer-holder.exe")) returned 1 [0053.230] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="authoracrossci.exe")) returned 1 [0053.231] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="critics_herbal_amplifier.exe")) returned 1 [0053.232] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hugestdlook.exe")) returned 1 [0053.233] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="terraceregistered.exe")) returned 1 [0053.234] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x514, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="poly_actually.exe")) returned 1 [0053.235] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="inn.exe")) returned 1 [0053.236] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fluidheating.exe")) returned 1 [0053.244] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0053.245] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="qualifications.exe")) returned 1 [0053.246] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="lauderdale transmitted washer.exe")) returned 1 [0053.247] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane.exe")) returned 1 [0053.248] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="saving.exe")) returned 1 [0053.249] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd40, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fred_j_species.exe")) returned 1 [0053.249] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="poster.exe")) returned 1 [0053.250] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept cheaper.exe")) returned 1 [0053.251] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="shooting.exe")) returned 1 [0053.252] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="protection.exe")) returned 1 [0053.253] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0053.254] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0053.255] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0053.297] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0053.298] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0053.299] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0053.300] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0053.301] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0053.302] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0053.302] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0053.303] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0053.304] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0053.305] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0053.306] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0053.307] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0053.307] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0053.308] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0053.310] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0053.311] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0053.311] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0053.312] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0053.313] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0053.314] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0053.315] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0053.316] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0053.317] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0053.337] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0053.348] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0053.350] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0053.366] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0053.370] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0053.381] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0053.381] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0053.382] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0053.383] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0053.384] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0053.385] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0053.386] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0053.387] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0053.388] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0053.388] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0053.389] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0053.390] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0053.391] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bra acoustic sink.exe")) returned 1 [0053.392] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="langaprsubmit.exe")) returned 1 [0053.393] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1110, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0053.394] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0053.394] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0053.395] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0053.406] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0053.407] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0053.408] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0053.408] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x126c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.410] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11fc, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0053.411] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11e4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0053.411] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1170, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0053.413] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1170, pcPriClassBase=8, dwFlags=0x0, szExeFile="vinfk.exe")) returned 1 [0053.414] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1170, pcPriClassBase=8, dwFlags=0x0, szExeFile="vinfk.exe")) returned 0 [0053.414] CloseHandle (hObject=0x218) returned 1 [0053.414] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58e098 [0053.414] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58df08 [0053.414] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x5834b0 [0053.414] GetLastError () returned 0x12 [0053.414] SetLastError (dwErrCode=0x12) [0053.414] GetLastError () returned 0x12 [0053.415] SetLastError (dwErrCode=0x12) [0053.415] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57b428 [0053.415] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0053.415] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0053.415] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589da8 | out: hHeap=0x570000) returned 1 [0053.415] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590d10 | out: hHeap=0x570000) returned 1 [0053.415] GetLastError () returned 0x12 [0053.415] SetLastError (dwErrCode=0x12) [0053.415] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589e98 [0053.415] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589ea8 [0053.415] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589d98 [0053.415] GetLastError () returned 0x12 [0053.415] SetLastError (dwErrCode=0x12) [0053.415] GetLastError () returned 0x12 [0053.415] SetLastError (dwErrCode=0x12) [0053.415] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e0f0 [0053.415] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0053.415] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0053.415] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e98 | out: hHeap=0x570000) returned 1 [0053.415] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0053.415] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d98 | out: hHeap=0x570000) returned 1 [0053.415] GetLastError () returned 0x12 [0053.415] SetLastError (dwErrCode=0x12) [0053.415] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589e98 [0053.415] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589db8 [0053.415] GetLastError () returned 0x12 [0053.415] SetLastError (dwErrCode=0x12) [0053.416] GetLastError () returned 0x12 [0053.416] SetLastError (dwErrCode=0x12) [0053.416] GetLastError () returned 0x12 [0053.416] SetLastError (dwErrCode=0x12) [0053.416] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589dd8 [0053.416] GetLastError () returned 0x12 [0053.416] SetLastError (dwErrCode=0x12) [0053.416] GetLastError () returned 0x12 [0053.416] SetLastError (dwErrCode=0x12) [0053.416] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e1b0 [0053.416] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0053.416] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0053.416] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e98 | out: hHeap=0x570000) returned 1 [0053.416] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0053.416] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589dd8 | out: hHeap=0x570000) returned 1 [0053.416] GetLastError () returned 0x12 [0053.416] SetLastError (dwErrCode=0x12) [0053.416] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589e28 [0053.416] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589db8 | out: hHeap=0x570000) returned 1 [0053.416] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ea8 | out: hHeap=0x570000) returned 1 [0053.416] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58dff8 [0053.416] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589de8 [0053.416] GetLastError () returned 0x12 [0053.416] SetLastError (dwErrCode=0x12) [0053.416] GetLastError () returned 0x12 [0053.416] SetLastError (dwErrCode=0x12) [0053.416] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e0f0 [0053.416] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0053.416] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0053.417] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e28 | out: hHeap=0x570000) returned 1 [0053.417] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e1b0 | out: hHeap=0x570000) returned 1 [0053.417] GetLastError () returned 0x12 [0053.417] SetLastError (dwErrCode=0x12) [0053.417] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589e28 [0053.417] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589e58 [0053.417] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589e78 [0053.417] GetLastError () returned 0x12 [0053.417] SetLastError (dwErrCode=0x12) [0053.417] GetLastError () returned 0x12 [0053.417] SetLastError (dwErrCode=0x12) [0053.417] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e1b0 [0053.417] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0053.417] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0053.417] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e28 | out: hHeap=0x570000) returned 1 [0053.417] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0053.417] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e78 | out: hHeap=0x570000) returned 1 [0053.417] GetLastError () returned 0x12 [0053.417] SetLastError (dwErrCode=0x12) [0053.417] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589db8 [0053.417] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589eb8 [0053.417] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581430 [0053.417] GetLastError () returned 0x12 [0053.417] SetLastError (dwErrCode=0x12) [0053.417] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58ba78 [0053.417] GetLastError () returned 0x12 [0053.417] SetLastError (dwErrCode=0x12) [0053.417] GetLastError () returned 0x12 [0053.417] SetLastError (dwErrCode=0x12) [0053.417] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xa0) returned 0x58bc80 [0053.417] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f08 [0053.418] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589ee8 [0053.418] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581350 [0053.418] GetLastError () returned 0x12 [0053.418] SetLastError (dwErrCode=0x12) [0053.418] GetLastError () returned 0x12 [0053.418] SetLastError (dwErrCode=0x12) [0053.418] GetLastError () returned 0x12 [0053.418] SetLastError (dwErrCode=0x12) [0053.418] GetLastError () returned 0x12 [0053.418] SetLastError (dwErrCode=0x12) [0053.418] GetLastError () returned 0x12 [0053.418] SetLastError (dwErrCode=0x12) [0053.418] GetLastError () returned 0x12 [0053.418] SetLastError (dwErrCode=0x12) [0053.418] GetLastError () returned 0x12 [0053.418] SetLastError (dwErrCode=0x12) [0053.418] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589d98 [0053.418] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x6) returned 0x589ef8 [0053.418] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x5) returned 0x589dc8 [0053.418] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589df8 [0053.418] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x5794d8 [0053.418] GetLastError () returned 0x12 [0053.418] SetLastError (dwErrCode=0x12) [0053.418] GetLastError () returned 0x12 [0053.418] SetLastError (dwErrCode=0x12) [0053.418] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d18 [0053.418] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e38 [0053.419] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589ec8 [0053.419] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589868 [0053.419] GetLastError () returned 0x12 [0053.419] SetLastError (dwErrCode=0x12) [0053.419] GetLastError () returned 0x12 [0053.419] SetLastError (dwErrCode=0x12) [0053.419] GetLastError () returned 0x12 [0053.419] SetLastError (dwErrCode=0x12) [0053.419] GetLastError () returned 0x12 [0053.419] SetLastError (dwErrCode=0x12) [0053.419] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e28 [0053.419] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589d28 [0053.419] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e08 [0053.419] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d88 [0053.419] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589c28 [0053.419] GetLastError () returned 0x12 [0053.419] SetLastError (dwErrCode=0x12) [0053.419] GetLastError () returned 0x12 [0053.419] SetLastError (dwErrCode=0x12) [0053.419] GetLastError () returned 0x12 [0053.419] SetLastError (dwErrCode=0x12) [0053.419] GetLastError () returned 0x12 [0053.419] SetLastError (dwErrCode=0x12) [0053.419] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589dd8 [0053.419] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589d78 [0053.419] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589da8 [0053.419] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589e18 [0053.419] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c558 [0053.419] GetLastError () returned 0x12 [0053.420] SetLastError (dwErrCode=0x12) [0053.420] GetLastError () returned 0x12 [0053.420] SetLastError (dwErrCode=0x12) [0053.420] GetLastError () returned 0x12 [0053.420] SetLastError (dwErrCode=0x12) [0053.420] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589568 [0053.420] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x5899e8 [0053.420] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589568 | out: hHeap=0x570000) returned 1 [0053.420] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x56) returned 0x589b08 [0053.420] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x579f68 [0053.420] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x58e0f0 [0053.420] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579f68 | out: hHeap=0x570000) returned 1 [0053.420] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x87) returned 0x579f68 [0053.420] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xd) returned 0x579538 [0053.420] GetLastError () returned 0x12 [0053.420] SetLastError (dwErrCode=0x12) [0053.420] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda68, cchData=2 | out: lpLCData="0") returned 2 [0053.420] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x579430 [0053.420] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x58f290 [0053.420] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c0a8 [0053.420] GetLastError () returned 0x12 [0053.420] SetLastError (dwErrCode=0x12) [0053.420] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58f720 [0053.420] GetLastError () returned 0x12 [0053.420] SetLastError (dwErrCode=0x12) [0053.420] GetLastError () returned 0x12 [0053.420] SetLastError (dwErrCode=0x12) [0053.420] GetLastError () returned 0x12 [0053.420] SetLastError (dwErrCode=0x12) [0053.420] GetLastError () returned 0x12 [0053.420] SetLastError (dwErrCode=0x12) [0053.420] GetLastError () returned 0x12 [0053.420] SetLastError (dwErrCode=0x12) [0053.421] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589ed8 [0053.421] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e48 [0053.421] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5815f0 [0053.421] GetLastError () returned 0x12 [0053.421] SetLastError (dwErrCode=0x12) [0053.421] GetLastError () returned 0x12 [0053.421] SetLastError (dwErrCode=0x12) [0053.421] GetLastError () returned 0x12 [0053.421] SetLastError (dwErrCode=0x12) [0053.421] GetLastError () returned 0x12 [0053.421] SetLastError (dwErrCode=0x12) [0053.421] GetLastError () returned 0x12 [0053.421] SetLastError (dwErrCode=0x12) [0053.421] GetLastError () returned 0x12 [0053.421] SetLastError (dwErrCode=0x12) [0053.421] GetLastError () returned 0x12 [0053.421] SetLastError (dwErrCode=0x12) [0053.421] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589d58 [0053.421] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x579448 [0053.421] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x57b8b8 [0053.421] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x57bc18 [0053.421] GetLastError () returned 0x12 [0053.421] SetLastError (dwErrCode=0x12) [0053.421] GetLastError () returned 0x12 [0053.421] SetLastError (dwErrCode=0x12) [0053.421] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d38 [0053.421] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e98 [0053.421] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d48 [0053.422] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589628 [0053.422] GetLastError () returned 0x12 [0053.422] SetLastError (dwErrCode=0x12) [0053.422] GetLastError () returned 0x12 [0053.422] SetLastError (dwErrCode=0x12) [0053.422] GetLastError () returned 0x12 [0053.422] SetLastError (dwErrCode=0x12) [0053.422] GetLastError () returned 0x12 [0053.422] SetLastError (dwErrCode=0x12) [0053.422] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e68 [0053.422] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d68 [0053.422] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589e78 [0053.422] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589e88 [0053.422] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589568 [0053.422] GetLastError () returned 0x12 [0053.422] SetLastError (dwErrCode=0x12) [0053.422] GetLastError () returned 0x12 [0053.422] SetLastError (dwErrCode=0x12) [0053.422] GetLastError () returned 0x12 [0053.422] SetLastError (dwErrCode=0x12) [0053.422] GetLastError () returned 0x12 [0053.422] SetLastError (dwErrCode=0x12) [0053.422] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589ea8 [0053.422] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589fc8 [0053.422] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589f38 [0053.422] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x58a098 [0053.422] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c378 [0053.422] GetLastError () returned 0x12 [0053.422] SetLastError (dwErrCode=0x12) [0053.422] GetLastError () returned 0x12 [0053.422] SetLastError (dwErrCode=0x12) [0053.422] GetLastError () returned 0x12 [0053.422] SetLastError (dwErrCode=0x12) [0053.423] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x57b428 [0053.423] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x58f928 [0053.423] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0053.423] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xac) returned 0x57b428 [0053.423] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10e) returned 0x58f9e0 [0053.423] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10e) returned 0x58faf8 [0053.423] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f9e0 | out: hHeap=0x570000) returned 1 [0053.423] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10e) returned 0x58f9e0 [0053.423] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x58df08 [0053.423] GetLastError () returned 0x12 [0053.423] SetLastError (dwErrCode=0x12) [0053.423] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda54, cchData=2 | out: lpLCData="0") returned 2 [0053.423] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58fca0 [0053.423] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x590018 [0053.423] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x5834f0 [0053.423] GetLastError () returned 0x12 [0053.423] SetLastError (dwErrCode=0x12) [0053.423] GetLastError () returned 0x12 [0053.423] SetLastError (dwErrCode=0x12) [0053.423] GetLastError () returned 0x12 [0053.423] SetLastError (dwErrCode=0x12) [0053.423] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c3c8 [0053.423] GetLastError () returned 0x12 [0053.423] SetLastError (dwErrCode=0x12) [0053.423] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x5904a8 [0053.423] GetLastError () returned 0x12 [0053.423] SetLastError (dwErrCode=0x12) [0053.423] GetLastError () returned 0x12 [0053.423] SetLastError (dwErrCode=0x12) [0053.423] GetLastError () returned 0x12 [0053.424] SetLastError (dwErrCode=0x12) [0053.424] GetLastError () returned 0x12 [0053.424] SetLastError (dwErrCode=0x12) [0053.424] GetLastError () returned 0x12 [0053.424] SetLastError (dwErrCode=0x12) [0053.424] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f48 [0053.424] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a058 [0053.424] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5814d0 [0053.424] GetLastError () returned 0x12 [0053.424] SetLastError (dwErrCode=0x12) [0053.424] GetLastError () returned 0x12 [0053.424] SetLastError (dwErrCode=0x12) [0053.424] GetLastError () returned 0x12 [0053.424] SetLastError (dwErrCode=0x12) [0053.424] GetLastError () returned 0x12 [0053.424] SetLastError (dwErrCode=0x12) [0053.424] GetLastError () returned 0x12 [0053.424] SetLastError (dwErrCode=0x12) [0053.424] GetLastError () returned 0x12 [0053.424] SetLastError (dwErrCode=0x12) [0053.424] GetLastError () returned 0x12 [0053.424] SetLastError (dwErrCode=0x12) [0053.424] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f58 [0053.424] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x58fee0 [0053.424] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x58fe08 [0053.424] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x58fd30 [0053.424] GetLastError () returned 0x12 [0053.424] SetLastError (dwErrCode=0x12) [0053.424] GetLastError () returned 0x12 [0053.424] SetLastError (dwErrCode=0x12) [0053.425] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589fd8 [0053.425] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a0a8 [0053.425] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a0b8 [0053.425] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589a48 [0053.425] GetLastError () returned 0x12 [0053.425] SetLastError (dwErrCode=0x12) [0053.425] GetLastError () returned 0x12 [0053.425] SetLastError (dwErrCode=0x12) [0053.425] GetLastError () returned 0x12 [0053.425] SetLastError (dwErrCode=0x12) [0053.425] GetLastError () returned 0x12 [0053.425] SetLastError (dwErrCode=0x12) [0053.425] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a018 [0053.425] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a068 [0053.425] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589fe8 [0053.425] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x58a028 [0053.425] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x5898c8 [0053.425] GetLastError () returned 0x12 [0053.425] SetLastError (dwErrCode=0x12) [0053.425] GetLastError () returned 0x12 [0053.425] SetLastError (dwErrCode=0x12) [0053.425] GetLastError () returned 0x12 [0053.425] SetLastError (dwErrCode=0x12) [0053.425] GetLastError () returned 0x12 [0053.425] SetLastError (dwErrCode=0x12) [0053.425] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a038 [0053.425] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a0c8 [0053.425] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589f68 [0053.425] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589f98 [0053.425] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58bf68 [0053.426] GetLastError () returned 0x12 [0053.426] SetLastError (dwErrCode=0x12) [0053.426] GetLastError () returned 0x12 [0053.426] SetLastError (dwErrCode=0x12) [0053.426] GetLastError () returned 0x12 [0053.426] SetLastError (dwErrCode=0x12) [0053.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589688 [0053.426] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5899e8 | out: hHeap=0x570000) returned 1 [0053.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x5895c8 [0053.426] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589688 | out: hHeap=0x570000) returned 1 [0053.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xac) returned 0x5906b0 [0053.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x590768 [0053.426] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0053.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x58e0f0 [0053.426] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590768 | out: hHeap=0x570000) returned 1 [0053.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10e) returned 0x590768 [0053.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x58e0c0 [0053.426] GetLastError () returned 0x12 [0053.426] SetLastError (dwErrCode=0x12) [0053.426] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda44, cchData=2 | out: lpLCData="0") returned 2 [0053.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58fe20 [0053.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x590880 [0053.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x583530 [0053.426] GetLastError () returned 0x12 [0053.426] SetLastError (dwErrCode=0x12) [0053.426] GetLastError () returned 0x12 [0053.426] SetLastError (dwErrCode=0x12) [0053.426] GetLastError () returned 0x12 [0053.426] SetLastError (dwErrCode=0x12) [0053.426] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589de8 | out: hHeap=0x570000) returned 1 [0053.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589de8 [0053.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589fb8 [0053.427] GetLastError () returned 0x12 [0053.427] SetLastError (dwErrCode=0x12) [0053.427] GetLastError () returned 0x12 [0053.427] SetLastError (dwErrCode=0x12) [0053.427] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x590d10 [0053.427] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x590dd0 [0053.427] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590dd0 | out: hHeap=0x570000) returned 1 [0053.427] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589db8 | out: hHeap=0x570000) returned 1 [0053.427] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e1b0 | out: hHeap=0x570000) returned 1 [0053.427] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fb8 | out: hHeap=0x570000) returned 1 [0053.427] GetLastError () returned 0x12 [0053.427] SetLastError (dwErrCode=0x12) [0053.427] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589ff8 [0053.478] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589eb8 | out: hHeap=0x570000) returned 1 [0053.478] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e58 | out: hHeap=0x570000) returned 1 [0053.478] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58faf8 | out: hHeap=0x570000) returned 1 [0053.478] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f928 | out: hHeap=0x570000) returned 1 [0053.478] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0053.478] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5895c8 | out: hHeap=0x570000) returned 1 [0053.478] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5834f0 | out: hHeap=0x570000) returned 1 [0053.479] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589de8 | out: hHeap=0x570000) returned 1 [0053.479] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589eb8 [0053.479] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d918 [0053.479] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58db70 [0053.479] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d918 | out: hHeap=0x570000) returned 1 [0053.480] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x583530 | out: hHeap=0x570000) returned 1 [0053.480] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590880 | out: hHeap=0x570000) returned 1 [0053.480] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fe20 | out: hHeap=0x570000) returned 1 [0053.481] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5906b0 | out: hHeap=0x570000) returned 1 [0053.481] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590768 | out: hHeap=0x570000) returned 1 [0053.481] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0c0 | out: hHeap=0x570000) returned 1 [0053.481] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58bf68 | out: hHeap=0x570000) returned 1 [0053.481] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a038 | out: hHeap=0x570000) returned 1 [0053.482] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0c8 | out: hHeap=0x570000) returned 1 [0053.482] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f68 | out: hHeap=0x570000) returned 1 [0053.482] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f98 | out: hHeap=0x570000) returned 1 [0053.482] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5898c8 | out: hHeap=0x570000) returned 1 [0053.482] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a018 | out: hHeap=0x570000) returned 1 [0053.482] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a068 | out: hHeap=0x570000) returned 1 [0053.482] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fe8 | out: hHeap=0x570000) returned 1 [0053.482] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a028 | out: hHeap=0x570000) returned 1 [0053.482] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589a48 | out: hHeap=0x570000) returned 1 [0053.482] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0b8 | out: hHeap=0x570000) returned 1 [0053.482] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0a8 | out: hHeap=0x570000) returned 1 [0053.483] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fd8 | out: hHeap=0x570000) returned 1 [0053.483] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fd30 | out: hHeap=0x570000) returned 1 [0053.483] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f58 | out: hHeap=0x570000) returned 1 [0053.483] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fee0 | out: hHeap=0x570000) returned 1 [0053.483] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fe08 | out: hHeap=0x570000) returned 1 [0053.483] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5814d0 | out: hHeap=0x570000) returned 1 [0053.483] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a058 | out: hHeap=0x570000) returned 1 [0053.483] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f48 | out: hHeap=0x570000) returned 1 [0053.483] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5904a8 | out: hHeap=0x570000) returned 1 [0053.483] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c3c8 | out: hHeap=0x570000) returned 1 [0053.483] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5834b0 | out: hHeap=0x570000) returned 1 [0053.484] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590018 | out: hHeap=0x570000) returned 1 [0053.484] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fca0 | out: hHeap=0x570000) returned 1 [0053.484] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0053.484] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f9e0 | out: hHeap=0x570000) returned 1 [0053.484] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58df08 | out: hHeap=0x570000) returned 1 [0053.486] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c378 | out: hHeap=0x570000) returned 1 [0053.486] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ea8 | out: hHeap=0x570000) returned 1 [0053.486] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fc8 | out: hHeap=0x570000) returned 1 [0053.487] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f38 | out: hHeap=0x570000) returned 1 [0053.487] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a098 | out: hHeap=0x570000) returned 1 [0053.487] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589568 | out: hHeap=0x570000) returned 1 [0053.487] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e68 | out: hHeap=0x570000) returned 1 [0053.487] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d68 | out: hHeap=0x570000) returned 1 [0053.487] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e78 | out: hHeap=0x570000) returned 1 [0053.487] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e88 | out: hHeap=0x570000) returned 1 [0053.487] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589628 | out: hHeap=0x570000) returned 1 [0053.487] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d48 | out: hHeap=0x570000) returned 1 [0053.487] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e98 | out: hHeap=0x570000) returned 1 [0053.488] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d38 | out: hHeap=0x570000) returned 1 [0053.488] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bc18 | out: hHeap=0x570000) returned 1 [0053.488] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d58 | out: hHeap=0x570000) returned 1 [0053.488] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579448 | out: hHeap=0x570000) returned 1 [0053.489] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b8b8 | out: hHeap=0x570000) returned 1 [0053.489] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5815f0 | out: hHeap=0x570000) returned 1 [0053.489] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e48 | out: hHeap=0x570000) returned 1 [0053.489] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ed8 | out: hHeap=0x570000) returned 1 [0053.489] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f720 | out: hHeap=0x570000) returned 1 [0053.489] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c0a8 | out: hHeap=0x570000) returned 1 [0053.489] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0053.489] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579430 | out: hHeap=0x570000) returned 1 [0053.489] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589b08 | out: hHeap=0x570000) returned 1 [0053.489] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579f68 | out: hHeap=0x570000) returned 1 [0053.489] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579538 | out: hHeap=0x570000) returned 1 [0053.489] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c558 | out: hHeap=0x570000) returned 1 [0053.489] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589dd8 | out: hHeap=0x570000) returned 1 [0053.489] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d78 | out: hHeap=0x570000) returned 1 [0053.489] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589da8 | out: hHeap=0x570000) returned 1 [0053.489] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e18 | out: hHeap=0x570000) returned 1 [0053.489] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589c28 | out: hHeap=0x570000) returned 1 [0053.489] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e28 | out: hHeap=0x570000) returned 1 [0053.490] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d28 | out: hHeap=0x570000) returned 1 [0053.490] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e08 | out: hHeap=0x570000) returned 1 [0053.490] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d88 | out: hHeap=0x570000) returned 1 [0053.490] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589868 | out: hHeap=0x570000) returned 1 [0053.490] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ec8 | out: hHeap=0x570000) returned 1 [0053.490] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e38 | out: hHeap=0x570000) returned 1 [0053.490] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d18 | out: hHeap=0x570000) returned 1 [0053.490] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5794d8 | out: hHeap=0x570000) returned 1 [0053.490] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589df8 | out: hHeap=0x570000) returned 1 [0053.490] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d98 | out: hHeap=0x570000) returned 1 [0053.490] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ef8 | out: hHeap=0x570000) returned 1 [0053.490] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589dc8 | out: hHeap=0x570000) returned 1 [0053.490] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581350 | out: hHeap=0x570000) returned 1 [0053.490] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ee8 | out: hHeap=0x570000) returned 1 [0053.490] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f08 | out: hHeap=0x570000) returned 1 [0053.490] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ba78 | out: hHeap=0x570000) returned 1 [0053.490] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581430 | out: hHeap=0x570000) returned 1 [0053.490] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58bc80 | out: hHeap=0x570000) returned 1 [0053.490] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589eb8 | out: hHeap=0x570000) returned 1 [0053.490] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58dff8 | out: hHeap=0x570000) returned 1 [0053.490] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1a) returned 0x58dff8 [0053.490] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58db70 | out: hHeap=0x570000) returned 1 [0053.490] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x210 [0053.558] Process32FirstW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0053.559] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0053.560] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0053.561] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0053.561] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0053.562] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0053.563] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0053.564] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0053.565] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0053.566] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.567] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0053.568] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0053.569] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.570] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0053.571] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x54, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.572] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.573] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.573] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.574] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.575] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.576] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.577] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.578] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.579] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.579] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0053.580] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.581] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0053.649] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0053.650] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.651] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0053.652] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0053.652] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0053.653] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0053.654] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0053.655] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0053.656] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0053.657] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0053.657] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0053.658] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending-windsor.exe")) returned 1 [0053.659] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="workers_offline_scripts.exe")) returned 1 [0053.660] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sharesamerican.exe")) returned 1 [0053.661] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x764, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="clara-cancer-holder.exe")) returned 1 [0053.662] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="authoracrossci.exe")) returned 1 [0053.663] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="critics_herbal_amplifier.exe")) returned 1 [0053.663] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hugestdlook.exe")) returned 1 [0053.664] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="terraceregistered.exe")) returned 1 [0053.665] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x514, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="poly_actually.exe")) returned 1 [0053.666] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="inn.exe")) returned 1 [0053.667] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fluidheating.exe")) returned 1 [0053.668] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0053.668] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="qualifications.exe")) returned 1 [0053.669] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="lauderdale transmitted washer.exe")) returned 1 [0053.670] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane.exe")) returned 1 [0053.671] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="saving.exe")) returned 1 [0053.672] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd40, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fred_j_species.exe")) returned 1 [0053.673] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="poster.exe")) returned 1 [0053.673] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept cheaper.exe")) returned 1 [0053.674] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="shooting.exe")) returned 1 [0053.675] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="protection.exe")) returned 1 [0053.676] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0053.677] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0053.678] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0053.679] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0053.679] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0053.680] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0053.681] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0053.682] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0053.683] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0053.683] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0053.684] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0053.685] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0053.740] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0053.741] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0053.742] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0053.743] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0053.743] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0053.744] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0053.745] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0053.746] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0053.747] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0053.748] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0053.749] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0053.749] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0053.750] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0053.751] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0053.752] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0053.753] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0053.754] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0053.754] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0053.756] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0053.756] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0053.757] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0053.758] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0053.759] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0053.760] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0053.761] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0053.762] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0053.762] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0053.763] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0053.764] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0053.765] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0053.766] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0053.767] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bra acoustic sink.exe")) returned 1 [0053.767] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="langaprsubmit.exe")) returned 1 [0053.768] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1110, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0053.769] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0053.770] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0053.771] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0053.772] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0053.773] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0053.773] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0053.774] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x126c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.775] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11fc, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0053.776] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11e4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0053.836] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1170, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0053.837] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1170, pcPriClassBase=8, dwFlags=0x0, szExeFile="vinfk.exe")) returned 1 [0053.838] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.839] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0053.839] CloseHandle (hObject=0x210) returned 1 [0053.840] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e098 | out: hHeap=0x570000) returned 1 [0053.840] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58e0c0 [0053.840] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58e098 [0053.840] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e098 | out: hHeap=0x570000) returned 1 [0053.840] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x5834b0 [0053.840] GetLastError () returned 0x12 [0053.840] SetLastError (dwErrCode=0x12) [0053.840] GetLastError () returned 0x12 [0053.840] SetLastError (dwErrCode=0x12) [0053.840] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57b428 [0053.840] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0053.840] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0053.840] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ff8 | out: hHeap=0x570000) returned 1 [0053.840] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590d10 | out: hHeap=0x570000) returned 1 [0053.840] GetLastError () returned 0x12 [0053.840] SetLastError (dwErrCode=0x12) [0053.840] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x58a038 [0053.840] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589f68 [0053.840] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x58a0a8 [0053.840] GetLastError () returned 0x12 [0053.840] SetLastError (dwErrCode=0x12) [0053.840] GetLastError () returned 0x12 [0053.840] SetLastError (dwErrCode=0x12) [0053.840] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e0f0 [0053.840] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0053.841] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0053.841] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a038 | out: hHeap=0x570000) returned 1 [0053.841] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0053.841] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0a8 | out: hHeap=0x570000) returned 1 [0053.841] GetLastError () returned 0x12 [0053.841] SetLastError (dwErrCode=0x12) [0053.841] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589fe8 [0053.841] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x58a088 [0053.841] GetLastError () returned 0x12 [0053.841] SetLastError (dwErrCode=0x12) [0053.841] GetLastError () returned 0x12 [0053.841] SetLastError (dwErrCode=0x12) [0053.841] GetLastError () returned 0x12 [0053.841] SetLastError (dwErrCode=0x12) [0053.841] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589f78 [0053.841] GetLastError () returned 0x12 [0053.841] SetLastError (dwErrCode=0x12) [0053.841] GetLastError () returned 0x12 [0053.841] SetLastError (dwErrCode=0x12) [0053.841] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e1b0 [0053.841] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0053.841] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0053.841] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fe8 | out: hHeap=0x570000) returned 1 [0053.841] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0053.841] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f78 | out: hHeap=0x570000) returned 1 [0053.841] GetLastError () returned 0x12 [0053.841] SetLastError (dwErrCode=0x12) [0053.841] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589fd8 [0053.841] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a088 | out: hHeap=0x570000) returned 1 [0053.841] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f68 | out: hHeap=0x570000) returned 1 [0053.841] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58e098 [0053.842] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x58a0a8 [0053.842] GetLastError () returned 0x12 [0053.842] SetLastError (dwErrCode=0x12) [0053.842] GetLastError () returned 0x12 [0053.842] SetLastError (dwErrCode=0x12) [0053.842] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e0f0 [0053.842] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0053.842] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0053.842] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fd8 | out: hHeap=0x570000) returned 1 [0053.842] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e1b0 | out: hHeap=0x570000) returned 1 [0053.842] GetLastError () returned 0x12 [0053.842] SetLastError (dwErrCode=0x12) [0053.842] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x58a088 [0053.842] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x58a0b8 [0053.842] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589f98 [0053.842] GetLastError () returned 0x12 [0053.842] SetLastError (dwErrCode=0x12) [0053.842] GetLastError () returned 0x12 [0053.842] SetLastError (dwErrCode=0x12) [0053.842] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e1b0 [0053.842] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0053.842] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0053.842] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a088 | out: hHeap=0x570000) returned 1 [0053.842] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0053.842] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f98 | out: hHeap=0x570000) returned 1 [0053.842] GetLastError () returned 0x12 [0053.842] SetLastError (dwErrCode=0x12) [0053.842] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589f58 [0053.843] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589fb8 [0053.843] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5815f0 [0053.843] GetLastError () returned 0x12 [0053.843] SetLastError (dwErrCode=0x12) [0053.843] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58ba78 [0053.843] GetLastError () returned 0x12 [0053.843] SetLastError (dwErrCode=0x12) [0053.843] GetLastError () returned 0x12 [0053.843] SetLastError (dwErrCode=0x12) [0053.843] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xa0) returned 0x58bc80 [0053.843] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a008 [0053.843] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a068 [0053.843] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5813d0 [0053.843] GetLastError () returned 0x12 [0053.843] SetLastError (dwErrCode=0x12) [0053.843] GetLastError () returned 0x12 [0053.843] SetLastError (dwErrCode=0x12) [0053.843] GetLastError () returned 0x12 [0053.843] SetLastError (dwErrCode=0x12) [0053.843] GetLastError () returned 0x12 [0053.843] SetLastError (dwErrCode=0x12) [0053.843] GetLastError () returned 0x12 [0053.843] SetLastError (dwErrCode=0x12) [0053.843] GetLastError () returned 0x12 [0053.843] SetLastError (dwErrCode=0x12) [0053.843] GetLastError () returned 0x12 [0053.843] SetLastError (dwErrCode=0x12) [0053.843] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a048 [0053.843] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x6) returned 0x589fa8 [0053.843] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x5) returned 0x589f78 [0053.844] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a028 [0053.844] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x579430 [0053.844] GetLastError () returned 0x12 [0053.844] SetLastError (dwErrCode=0x12) [0053.844] GetLastError () returned 0x12 [0053.844] SetLastError (dwErrCode=0x12) [0053.844] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f48 [0053.844] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f98 [0053.844] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a038 [0053.844] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x5899e8 [0053.844] GetLastError () returned 0x12 [0053.844] SetLastError (dwErrCode=0x12) [0053.844] GetLastError () returned 0x12 [0053.844] SetLastError (dwErrCode=0x12) [0053.844] GetLastError () returned 0x12 [0053.844] SetLastError (dwErrCode=0x12) [0053.844] GetLastError () returned 0x12 [0053.844] SetLastError (dwErrCode=0x12) [0053.844] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589fd8 [0053.844] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a0c8 [0053.844] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f68 [0053.844] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a0d8 [0053.844] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x5897a8 [0053.844] GetLastError () returned 0x12 [0053.844] SetLastError (dwErrCode=0x12) [0053.844] GetLastError () returned 0x12 [0053.844] SetLastError (dwErrCode=0x12) [0053.844] GetLastError () returned 0x12 [0053.845] SetLastError (dwErrCode=0x12) [0053.845] GetLastError () returned 0x12 [0053.845] SetLastError (dwErrCode=0x12) [0053.845] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589fc8 [0053.845] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a078 [0053.845] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f88 [0053.845] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a018 [0053.845] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58bf68 [0053.845] GetLastError () returned 0x12 [0053.845] SetLastError (dwErrCode=0x12) [0053.845] GetLastError () returned 0x12 [0053.845] SetLastError (dwErrCode=0x12) [0053.845] GetLastError () returned 0x12 [0053.845] SetLastError (dwErrCode=0x12) [0053.845] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x5895c8 [0053.845] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589c88 [0053.845] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5895c8 | out: hHeap=0x570000) returned 1 [0053.845] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x56) returned 0x589868 [0053.845] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x579f68 [0053.845] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x58e0f0 [0053.845] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579f68 | out: hHeap=0x570000) returned 1 [0053.845] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x87) returned 0x579f68 [0053.845] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xd) returned 0x579448 [0053.845] GetLastError () returned 0x12 [0053.845] SetLastError (dwErrCode=0x12) [0053.845] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda68, cchData=2 | out: lpLCData="0") returned 2 [0053.845] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x5794d8 [0053.845] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x58f290 [0053.845] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c328 [0053.845] GetLastError () returned 0x12 [0053.845] SetLastError (dwErrCode=0x12) [0053.845] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58f720 [0053.846] GetLastError () returned 0x12 [0053.846] SetLastError (dwErrCode=0x12) [0053.846] GetLastError () returned 0x12 [0053.846] SetLastError (dwErrCode=0x12) [0053.846] GetLastError () returned 0x12 [0053.846] SetLastError (dwErrCode=0x12) [0053.846] GetLastError () returned 0x12 [0053.846] SetLastError (dwErrCode=0x12) [0053.846] GetLastError () returned 0x12 [0053.846] SetLastError (dwErrCode=0x12) [0053.846] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589fe8 [0053.846] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589ff8 [0053.846] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581650 [0053.846] GetLastError () returned 0x12 [0053.846] SetLastError (dwErrCode=0x12) [0053.846] GetLastError () returned 0x12 [0053.846] SetLastError (dwErrCode=0x12) [0053.846] GetLastError () returned 0x12 [0053.846] SetLastError (dwErrCode=0x12) [0053.846] GetLastError () returned 0x12 [0053.846] SetLastError (dwErrCode=0x12) [0053.846] GetLastError () returned 0x12 [0053.846] SetLastError (dwErrCode=0x12) [0053.846] GetLastError () returned 0x12 [0053.846] SetLastError (dwErrCode=0x12) [0053.846] GetLastError () returned 0x12 [0053.846] SetLastError (dwErrCode=0x12) [0053.846] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a058 [0053.846] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x579538 [0053.846] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x57b8b8 [0053.846] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x57bc18 [0053.846] GetLastError () returned 0x12 [0053.847] SetLastError (dwErrCode=0x12) [0053.847] GetLastError () returned 0x12 [0053.847] SetLastError (dwErrCode=0x12) [0053.847] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f18 [0053.847] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f28 [0053.847] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a088 [0053.847] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589988 [0053.847] GetLastError () returned 0x12 [0053.847] SetLastError (dwErrCode=0x12) [0053.847] GetLastError () returned 0x12 [0053.847] SetLastError (dwErrCode=0x12) [0053.847] GetLastError () returned 0x12 [0053.847] SetLastError (dwErrCode=0x12) [0053.847] GetLastError () returned 0x12 [0053.847] SetLastError (dwErrCode=0x12) [0053.847] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a098 [0053.847] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589f38 [0053.847] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d28 [0053.847] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589db8 [0053.847] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589a48 [0053.847] GetLastError () returned 0x12 [0053.847] SetLastError (dwErrCode=0x12) [0053.847] GetLastError () returned 0x12 [0053.847] SetLastError (dwErrCode=0x12) [0053.847] GetLastError () returned 0x12 [0053.847] SetLastError (dwErrCode=0x12) [0053.847] GetLastError () returned 0x12 [0053.847] SetLastError (dwErrCode=0x12) [0053.848] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589eb8 [0053.848] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d38 [0053.848] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d78 [0053.848] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589d98 [0053.848] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c148 [0053.848] GetLastError () returned 0x12 [0053.848] SetLastError (dwErrCode=0x12) [0053.848] GetLastError () returned 0x12 [0053.848] SetLastError (dwErrCode=0x12) [0053.848] GetLastError () returned 0x12 [0053.848] SetLastError (dwErrCode=0x12) [0053.848] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x57b428 [0053.848] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x58f928 [0053.848] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0053.848] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xac) returned 0x57b428 [0053.848] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10e) returned 0x58f9e0 [0053.848] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10e) returned 0x58faf8 [0053.848] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f9e0 | out: hHeap=0x570000) returned 1 [0053.848] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10e) returned 0x58f9e0 [0053.848] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x58df08 [0053.848] GetLastError () returned 0x12 [0053.848] SetLastError (dwErrCode=0x12) [0053.848] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda54, cchData=2 | out: lpLCData="0") returned 2 [0053.848] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58fe38 [0053.848] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x590018 [0053.848] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x5834f0 [0053.848] GetLastError () returned 0x12 [0053.848] SetLastError (dwErrCode=0x12) [0053.848] GetLastError () returned 0x12 [0053.848] SetLastError (dwErrCode=0x12) [0053.848] GetLastError () returned 0x12 [0053.849] SetLastError (dwErrCode=0x12) [0053.849] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c008 [0053.849] GetLastError () returned 0x12 [0053.849] SetLastError (dwErrCode=0x12) [0053.849] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x5904a8 [0053.849] GetLastError () returned 0x12 [0053.849] SetLastError (dwErrCode=0x12) [0053.849] GetLastError () returned 0x12 [0053.849] SetLastError (dwErrCode=0x12) [0053.849] GetLastError () returned 0x12 [0053.849] SetLastError (dwErrCode=0x12) [0053.849] GetLastError () returned 0x12 [0053.849] SetLastError (dwErrCode=0x12) [0053.849] GetLastError () returned 0x12 [0053.850] SetLastError (dwErrCode=0x12) [0053.850] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e78 [0053.850] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e48 [0053.851] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5815b0 [0053.852] GetLastError () returned 0x12 [0053.852] SetLastError (dwErrCode=0x12) [0053.852] GetLastError () returned 0x12 [0053.852] SetLastError (dwErrCode=0x12) [0053.852] GetLastError () returned 0x12 [0053.852] SetLastError (dwErrCode=0x12) [0053.852] GetLastError () returned 0x12 [0053.852] SetLastError (dwErrCode=0x12) [0053.852] GetLastError () returned 0x12 [0053.858] SetLastError (dwErrCode=0x12) [0053.858] GetLastError () returned 0x12 [0053.858] SetLastError (dwErrCode=0x12) [0053.858] GetLastError () returned 0x12 [0053.859] SetLastError (dwErrCode=0x12) [0053.859] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589da8 [0053.859] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x58fec8 [0053.859] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x58ff28 [0053.861] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x58fd00 [0053.861] GetLastError () returned 0x12 [0053.861] SetLastError (dwErrCode=0x12) [0053.861] GetLastError () returned 0x12 [0053.861] SetLastError (dwErrCode=0x12) [0053.862] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e88 [0053.863] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e38 [0053.863] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589ea8 [0053.863] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589aa8 [0053.863] GetLastError () returned 0x12 [0053.863] SetLastError (dwErrCode=0x12) [0053.863] GetLastError () returned 0x12 [0053.863] SetLastError (dwErrCode=0x12) [0053.863] GetLastError () returned 0x12 [0053.863] SetLastError (dwErrCode=0x12) [0053.863] GetLastError () returned 0x12 [0053.863] SetLastError (dwErrCode=0x12) [0053.863] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589ec8 [0053.863] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589ed8 [0053.863] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d58 [0053.863] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589d48 [0053.863] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589b08 [0053.863] GetLastError () returned 0x12 [0053.863] SetLastError (dwErrCode=0x12) [0053.863] GetLastError () returned 0x12 [0053.863] SetLastError (dwErrCode=0x12) [0053.863] GetLastError () returned 0x12 [0053.863] SetLastError (dwErrCode=0x12) [0053.863] GetLastError () returned 0x12 [0053.863] SetLastError (dwErrCode=0x12) [0053.863] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589ee8 [0053.863] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589e58 [0053.863] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d68 [0053.863] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589ef8 [0053.864] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c558 [0053.864] GetLastError () returned 0x12 [0053.864] SetLastError (dwErrCode=0x12) [0053.864] GetLastError () returned 0x12 [0053.864] SetLastError (dwErrCode=0x12) [0053.864] GetLastError () returned 0x12 [0053.864] SetLastError (dwErrCode=0x12) [0053.864] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589b68 [0053.864] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589c88 | out: hHeap=0x570000) returned 1 [0053.864] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589bc8 [0053.864] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589b68 | out: hHeap=0x570000) returned 1 [0053.864] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xac) returned 0x5906b0 [0053.864] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x590768 [0053.864] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0053.864] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x58e0f0 [0053.864] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590768 | out: hHeap=0x570000) returned 1 [0053.864] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10e) returned 0x590768 [0053.864] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x58dcb0 [0053.864] GetLastError () returned 0x12 [0053.864] SetLastError (dwErrCode=0x12) [0053.864] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda44, cchData=2 | out: lpLCData="0") returned 2 [0053.864] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58fd30 [0053.864] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x590880 [0053.864] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x583530 [0053.864] GetLastError () returned 0x12 [0053.864] SetLastError (dwErrCode=0x12) [0053.864] GetLastError () returned 0x12 [0053.864] SetLastError (dwErrCode=0x12) [0053.864] GetLastError () returned 0x12 [0053.864] SetLastError (dwErrCode=0x12) [0053.864] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0a8 | out: hHeap=0x570000) returned 1 [0053.865] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x58a0a8 [0053.865] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589d88 [0053.865] GetLastError () returned 0x12 [0053.865] SetLastError (dwErrCode=0x12) [0053.865] GetLastError () returned 0x12 [0053.865] SetLastError (dwErrCode=0x12) [0053.865] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x590d10 [0053.865] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x590dd0 [0053.865] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590dd0 | out: hHeap=0x570000) returned 1 [0053.865] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f58 | out: hHeap=0x570000) returned 1 [0053.865] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e1b0 | out: hHeap=0x570000) returned 1 [0053.865] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d88 | out: hHeap=0x570000) returned 1 [0053.865] GetLastError () returned 0x12 [0053.865] SetLastError (dwErrCode=0x12) [0053.865] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589f08 [0053.865] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fb8 | out: hHeap=0x570000) returned 1 [0053.865] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0b8 | out: hHeap=0x570000) returned 1 [0053.865] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58faf8 | out: hHeap=0x570000) returned 1 [0053.865] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f928 | out: hHeap=0x570000) returned 1 [0053.865] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0053.865] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589bc8 | out: hHeap=0x570000) returned 1 [0053.865] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5834f0 | out: hHeap=0x570000) returned 1 [0053.865] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0a8 | out: hHeap=0x570000) returned 1 [0053.865] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x58a0a8 [0053.865] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58ddc8 [0053.865] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58db70 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ddc8 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x583530 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590880 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fd30 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5906b0 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590768 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58dcb0 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c558 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ee8 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e58 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d68 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ef8 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589b08 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ec8 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ed8 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d58 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d48 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589aa8 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ea8 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e38 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e88 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fd00 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589da8 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fec8 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ff28 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5815b0 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e48 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e78 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5904a8 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c008 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5834b0 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590018 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fe38 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f9e0 | out: hHeap=0x570000) returned 1 [0053.866] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58df08 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c148 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589eb8 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d38 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d78 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d98 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589a48 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a098 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f38 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d28 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589db8 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589988 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a088 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f28 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f18 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bc18 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a058 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579538 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b8b8 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581650 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ff8 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fe8 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f720 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c328 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5794d8 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589868 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579f68 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579448 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58bf68 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fc8 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a078 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f88 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a018 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5897a8 | out: hHeap=0x570000) returned 1 [0053.867] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fd8 | out: hHeap=0x570000) returned 1 [0053.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0c8 | out: hHeap=0x570000) returned 1 [0053.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f68 | out: hHeap=0x570000) returned 1 [0053.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0d8 | out: hHeap=0x570000) returned 1 [0053.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5899e8 | out: hHeap=0x570000) returned 1 [0053.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a038 | out: hHeap=0x570000) returned 1 [0053.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f98 | out: hHeap=0x570000) returned 1 [0053.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f48 | out: hHeap=0x570000) returned 1 [0053.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579430 | out: hHeap=0x570000) returned 1 [0053.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a028 | out: hHeap=0x570000) returned 1 [0053.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a048 | out: hHeap=0x570000) returned 1 [0053.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fa8 | out: hHeap=0x570000) returned 1 [0053.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f78 | out: hHeap=0x570000) returned 1 [0053.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5813d0 | out: hHeap=0x570000) returned 1 [0053.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a068 | out: hHeap=0x570000) returned 1 [0053.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a008 | out: hHeap=0x570000) returned 1 [0053.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ba78 | out: hHeap=0x570000) returned 1 [0053.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5815f0 | out: hHeap=0x570000) returned 1 [0053.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58bc80 | out: hHeap=0x570000) returned 1 [0053.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0a8 | out: hHeap=0x570000) returned 1 [0053.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e098 | out: hHeap=0x570000) returned 1 [0053.868] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1c) returned 0x58e098 [0053.868] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58db70 | out: hHeap=0x570000) returned 1 [0053.868] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x218 [0053.879] Process32FirstW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0053.879] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0053.880] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0053.881] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0053.882] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0053.975] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0053.988] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0053.994] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0053.994] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0053.995] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.996] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0053.997] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0053.998] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.999] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0054.000] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x54, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.000] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.001] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.002] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.003] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.004] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.005] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.006] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.006] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.007] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.008] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0054.009] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.010] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0054.011] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0054.012] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.013] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0054.013] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0054.014] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0054.015] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0054.016] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0054.017] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0054.017] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0054.018] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0054.019] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0054.020] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending-windsor.exe")) returned 1 [0054.021] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="workers_offline_scripts.exe")) returned 1 [0054.022] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sharesamerican.exe")) returned 1 [0054.023] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x764, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="clara-cancer-holder.exe")) returned 1 [0054.032] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="authoracrossci.exe")) returned 1 [0054.035] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="critics_herbal_amplifier.exe")) returned 1 [0054.071] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hugestdlook.exe")) returned 1 [0054.072] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="terraceregistered.exe")) returned 1 [0054.073] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x514, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="poly_actually.exe")) returned 1 [0054.073] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="inn.exe")) returned 1 [0054.074] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fluidheating.exe")) returned 1 [0054.075] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0054.076] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="qualifications.exe")) returned 1 [0054.077] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="lauderdale transmitted washer.exe")) returned 1 [0054.078] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane.exe")) returned 1 [0054.078] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="saving.exe")) returned 1 [0054.079] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd40, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fred_j_species.exe")) returned 1 [0054.080] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="poster.exe")) returned 1 [0054.081] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept cheaper.exe")) returned 1 [0054.082] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="shooting.exe")) returned 1 [0054.083] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="protection.exe")) returned 1 [0054.083] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0054.084] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0054.085] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0054.086] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0054.087] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0054.088] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0054.089] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0054.090] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0054.090] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0054.091] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0054.092] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0054.093] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0054.094] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0054.095] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0054.095] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0054.096] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0054.097] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0054.098] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0054.099] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0054.100] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0054.115] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0054.121] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0054.122] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0054.123] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0054.123] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0054.124] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0054.125] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0054.126] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0054.127] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0054.128] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0054.129] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0054.129] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0054.130] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0054.131] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0054.132] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0054.133] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0054.134] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0054.135] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0054.136] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0054.136] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0054.137] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0054.138] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0054.139] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0054.140] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bra acoustic sink.exe")) returned 1 [0054.141] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="langaprsubmit.exe")) returned 1 [0054.142] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1110, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0054.142] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0054.143] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0054.144] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0054.145] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0054.146] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0054.147] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0054.148] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x126c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.149] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11fc, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0054.149] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11e4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0054.150] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1170, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0054.151] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1170, pcPriClassBase=8, dwFlags=0x0, szExeFile="vinfk.exe")) returned 1 [0054.152] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.153] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0054.153] CloseHandle (hObject=0x218) returned 1 [0054.153] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0c0 | out: hHeap=0x570000) returned 1 [0054.153] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58e0c0 [0054.153] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58df08 [0054.153] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58df08 | out: hHeap=0x570000) returned 1 [0054.153] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58df08 [0054.153] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58dc10 [0054.153] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58df08 | out: hHeap=0x570000) returned 1 [0054.154] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x5834b0 [0054.154] GetLastError () returned 0x12 [0054.154] SetLastError (dwErrCode=0x12) [0054.154] GetLastError () returned 0x12 [0054.154] SetLastError (dwErrCode=0x12) [0054.154] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57b428 [0054.154] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0054.154] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0054.154] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f08 | out: hHeap=0x570000) returned 1 [0054.154] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590d10 | out: hHeap=0x570000) returned 1 [0054.154] GetLastError () returned 0x12 [0054.154] SetLastError (dwErrCode=0x12) [0054.154] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589ff8 [0054.154] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589f48 [0054.154] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589fe8 [0054.154] GetLastError () returned 0x12 [0054.154] SetLastError (dwErrCode=0x12) [0054.154] GetLastError () returned 0x12 [0054.154] SetLastError (dwErrCode=0x12) [0054.154] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e0f0 [0054.154] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0054.154] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0054.154] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ff8 | out: hHeap=0x570000) returned 1 [0054.154] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0054.154] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fe8 | out: hHeap=0x570000) returned 1 [0054.154] GetLastError () returned 0x12 [0054.154] SetLastError (dwErrCode=0x12) [0054.155] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589fa8 [0054.155] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x58a038 [0054.155] GetLastError () returned 0x12 [0054.155] SetLastError (dwErrCode=0x12) [0054.155] GetLastError () returned 0x12 [0054.155] SetLastError (dwErrCode=0x12) [0054.155] GetLastError () returned 0x12 [0054.155] SetLastError (dwErrCode=0x12) [0054.155] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589f68 [0054.155] GetLastError () returned 0x12 [0054.155] SetLastError (dwErrCode=0x12) [0054.155] GetLastError () returned 0x12 [0054.155] SetLastError (dwErrCode=0x12) [0054.155] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e1b0 [0054.155] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0054.155] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0054.155] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fa8 | out: hHeap=0x570000) returned 1 [0054.155] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0054.155] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f68 | out: hHeap=0x570000) returned 1 [0054.155] GetLastError () returned 0x12 [0054.155] SetLastError (dwErrCode=0x12) [0054.155] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x58a058 [0054.155] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a038 | out: hHeap=0x570000) returned 1 [0054.155] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f48 | out: hHeap=0x570000) returned 1 [0054.155] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58df08 [0054.155] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589f58 [0054.155] GetLastError () returned 0x12 [0054.155] SetLastError (dwErrCode=0x12) [0054.155] GetLastError () returned 0x12 [0054.155] SetLastError (dwErrCode=0x12) [0054.156] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e0f0 [0054.156] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0054.156] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0054.156] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a058 | out: hHeap=0x570000) returned 1 [0054.156] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e1b0 | out: hHeap=0x570000) returned 1 [0054.156] GetLastError () returned 0x12 [0054.156] SetLastError (dwErrCode=0x12) [0054.156] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589f38 [0054.156] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x58a098 [0054.156] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x58a058 [0054.156] GetLastError () returned 0x12 [0054.156] SetLastError (dwErrCode=0x12) [0054.156] GetLastError () returned 0x12 [0054.156] SetLastError (dwErrCode=0x12) [0054.156] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e1b0 [0054.156] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0054.156] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0054.156] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f38 | out: hHeap=0x570000) returned 1 [0054.156] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0054.156] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a058 | out: hHeap=0x570000) returned 1 [0054.156] GetLastError () returned 0x12 [0054.156] SetLastError (dwErrCode=0x12) [0054.156] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589f38 [0054.156] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x58a028 [0054.156] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5815b0 [0054.156] GetLastError () returned 0x12 [0054.156] SetLastError (dwErrCode=0x12) [0054.156] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58ba78 [0054.157] GetLastError () returned 0x12 [0054.157] SetLastError (dwErrCode=0x12) [0054.157] GetLastError () returned 0x12 [0054.157] SetLastError (dwErrCode=0x12) [0054.157] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xa0) returned 0x58bc80 [0054.157] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a038 [0054.157] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f78 [0054.157] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5813d0 [0054.157] GetLastError () returned 0x12 [0054.157] SetLastError (dwErrCode=0x12) [0054.157] GetLastError () returned 0x12 [0054.157] SetLastError (dwErrCode=0x12) [0054.157] GetLastError () returned 0x12 [0054.157] SetLastError (dwErrCode=0x12) [0054.157] GetLastError () returned 0x12 [0054.157] SetLastError (dwErrCode=0x12) [0054.157] GetLastError () returned 0x12 [0054.157] SetLastError (dwErrCode=0x12) [0054.157] GetLastError () returned 0x12 [0054.157] SetLastError (dwErrCode=0x12) [0054.157] GetLastError () returned 0x12 [0054.157] SetLastError (dwErrCode=0x12) [0054.157] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a0c8 [0054.157] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x6) returned 0x589f68 [0054.157] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x5) returned 0x589ff8 [0054.157] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a0d8 [0054.157] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x5794d8 [0054.157] GetLastError () returned 0x12 [0054.157] SetLastError (dwErrCode=0x12) [0054.157] GetLastError () returned 0x12 [0054.158] SetLastError (dwErrCode=0x12) [0054.158] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a058 [0054.158] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a008 [0054.158] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f48 [0054.158] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x5895c8 [0054.158] GetLastError () returned 0x12 [0054.158] SetLastError (dwErrCode=0x12) [0054.158] GetLastError () returned 0x12 [0054.158] SetLastError (dwErrCode=0x12) [0054.158] GetLastError () returned 0x12 [0054.158] SetLastError (dwErrCode=0x12) [0054.158] GetLastError () returned 0x12 [0054.158] SetLastError (dwErrCode=0x12) [0054.158] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589fa8 [0054.158] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589fc8 [0054.158] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a068 [0054.158] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a018 [0054.158] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x5897a8 [0054.158] GetLastError () returned 0x12 [0054.158] SetLastError (dwErrCode=0x12) [0054.158] GetLastError () returned 0x12 [0054.158] SetLastError (dwErrCode=0x12) [0054.158] GetLastError () returned 0x12 [0054.158] SetLastError (dwErrCode=0x12) [0054.158] GetLastError () returned 0x12 [0054.158] SetLastError (dwErrCode=0x12) [0054.158] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a048 [0054.158] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a078 [0054.158] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f28 [0054.158] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589fe8 [0054.159] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c008 [0054.159] GetLastError () returned 0x12 [0054.159] SetLastError (dwErrCode=0x12) [0054.159] GetLastError () returned 0x12 [0054.159] SetLastError (dwErrCode=0x12) [0054.159] GetLastError () returned 0x12 [0054.159] SetLastError (dwErrCode=0x12) [0054.159] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589628 [0054.159] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589b08 [0054.159] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589628 | out: hHeap=0x570000) returned 1 [0054.159] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x56) returned 0x589b68 [0054.159] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x579f68 [0054.159] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x58e0f0 [0054.159] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579f68 | out: hHeap=0x570000) returned 1 [0054.159] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x87) returned 0x579f68 [0054.159] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xd) returned 0x579538 [0054.159] GetLastError () returned 0x12 [0054.159] SetLastError (dwErrCode=0x12) [0054.159] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda68, cchData=2 | out: lpLCData="0") returned 2 [0054.159] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x579430 [0054.159] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x58f290 [0054.159] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c198 [0054.159] GetLastError () returned 0x12 [0054.159] SetLastError (dwErrCode=0x12) [0054.159] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58f720 [0054.159] GetLastError () returned 0x12 [0054.159] SetLastError (dwErrCode=0x12) [0054.159] GetLastError () returned 0x12 [0054.159] SetLastError (dwErrCode=0x12) [0054.159] GetLastError () returned 0x12 [0054.159] SetLastError (dwErrCode=0x12) [0054.160] GetLastError () returned 0x12 [0054.160] SetLastError (dwErrCode=0x12) [0054.160] GetLastError () returned 0x12 [0054.160] SetLastError (dwErrCode=0x12) [0054.160] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589fd8 [0054.160] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a088 [0054.160] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581430 [0054.160] GetLastError () returned 0x12 [0054.160] SetLastError (dwErrCode=0x12) [0054.160] GetLastError () returned 0x12 [0054.160] SetLastError (dwErrCode=0x12) [0054.160] GetLastError () returned 0x12 [0054.160] SetLastError (dwErrCode=0x12) [0054.160] GetLastError () returned 0x12 [0054.160] SetLastError (dwErrCode=0x12) [0054.160] GetLastError () returned 0x12 [0054.160] SetLastError (dwErrCode=0x12) [0054.160] GetLastError () returned 0x12 [0054.160] SetLastError (dwErrCode=0x12) [0054.160] GetLastError () returned 0x12 [0054.160] SetLastError (dwErrCode=0x12) [0054.160] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a0a8 [0054.160] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x579448 [0054.160] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x57b8b8 [0054.160] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x57bc18 [0054.160] GetLastError () returned 0x12 [0054.160] SetLastError (dwErrCode=0x12) [0054.160] GetLastError () returned 0x12 [0054.160] SetLastError (dwErrCode=0x12) [0054.161] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589fb8 [0054.161] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a0b8 [0054.161] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f88 [0054.161] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589c88 [0054.161] GetLastError () returned 0x12 [0054.161] SetLastError (dwErrCode=0x12) [0054.161] GetLastError () returned 0x12 [0054.161] SetLastError (dwErrCode=0x12) [0054.161] GetLastError () returned 0x12 [0054.161] SetLastError (dwErrCode=0x12) [0054.161] GetLastError () returned 0x12 [0054.161] SetLastError (dwErrCode=0x12) [0054.161] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f18 [0054.161] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589f98 [0054.161] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d98 [0054.161] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589ee8 [0054.161] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589808 [0054.161] GetLastError () returned 0x12 [0054.161] SetLastError (dwErrCode=0x12) [0054.161] GetLastError () returned 0x12 [0054.161] SetLastError (dwErrCode=0x12) [0054.161] GetLastError () returned 0x12 [0054.161] SetLastError (dwErrCode=0x12) [0054.161] GetLastError () returned 0x12 [0054.161] SetLastError (dwErrCode=0x12) [0054.161] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589de8 [0054.161] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d58 [0054.161] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d18 [0054.161] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589e38 [0054.161] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c5f8 [0054.162] GetLastError () returned 0x12 [0054.162] SetLastError (dwErrCode=0x12) [0054.162] GetLastError () returned 0x12 [0054.162] SetLastError (dwErrCode=0x12) [0054.162] GetLastError () returned 0x12 [0054.162] SetLastError (dwErrCode=0x12) [0054.162] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x57b428 [0054.162] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x58f928 [0054.162] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0054.162] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xac) returned 0x57b428 [0054.162] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10e) returned 0x58f9e0 [0054.162] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10e) returned 0x58faf8 [0054.162] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f9e0 | out: hHeap=0x570000) returned 1 [0054.162] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10e) returned 0x58f9e0 [0054.162] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x58db48 [0054.162] GetLastError () returned 0x12 [0054.162] SetLastError (dwErrCode=0x12) [0054.162] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda54, cchData=2 | out: lpLCData="0") returned 2 [0054.162] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58fc40 [0054.162] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x590018 [0054.162] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x5834f0 [0054.162] GetLastError () returned 0x12 [0054.162] SetLastError (dwErrCode=0x12) [0054.162] GetLastError () returned 0x12 [0054.162] SetLastError (dwErrCode=0x12) [0054.162] GetLastError () returned 0x12 [0054.162] SetLastError (dwErrCode=0x12) [0054.162] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c418 [0054.162] GetLastError () returned 0x12 [0054.162] SetLastError (dwErrCode=0x12) [0054.162] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x5904a8 [0054.162] GetLastError () returned 0x12 [0054.163] SetLastError (dwErrCode=0x12) [0054.163] GetLastError () returned 0x12 [0054.163] SetLastError (dwErrCode=0x12) [0054.163] GetLastError () returned 0x12 [0054.163] SetLastError (dwErrCode=0x12) [0054.163] GetLastError () returned 0x12 [0054.163] SetLastError (dwErrCode=0x12) [0054.163] GetLastError () returned 0x12 [0054.163] SetLastError (dwErrCode=0x12) [0054.163] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e08 [0054.163] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589ef8 [0054.163] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5815f0 [0054.163] GetLastError () returned 0x12 [0054.163] SetLastError (dwErrCode=0x12) [0054.163] GetLastError () returned 0x12 [0054.163] SetLastError (dwErrCode=0x12) [0054.163] GetLastError () returned 0x12 [0054.163] SetLastError (dwErrCode=0x12) [0054.163] GetLastError () returned 0x12 [0054.163] SetLastError (dwErrCode=0x12) [0054.163] GetLastError () returned 0x12 [0054.163] SetLastError (dwErrCode=0x12) [0054.163] GetLastError () returned 0x12 [0054.163] SetLastError (dwErrCode=0x12) [0054.163] GetLastError () returned 0x12 [0054.163] SetLastError (dwErrCode=0x12) [0054.163] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589ed8 [0054.163] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x58fca0 [0054.163] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x58fc88 [0054.163] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x58fe20 [0054.163] GetLastError () returned 0x12 [0054.164] SetLastError (dwErrCode=0x12) [0054.164] GetLastError () returned 0x12 [0054.164] SetLastError (dwErrCode=0x12) [0054.164] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e98 [0054.164] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e28 [0054.164] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589ea8 [0054.166] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589628 [0054.166] GetLastError () returned 0x12 [0054.166] SetLastError (dwErrCode=0x12) [0054.166] GetLastError () returned 0x12 [0054.166] SetLastError (dwErrCode=0x12) [0054.166] GetLastError () returned 0x12 [0054.166] SetLastError (dwErrCode=0x12) [0054.166] GetLastError () returned 0x12 [0054.166] SetLastError (dwErrCode=0x12) [0054.166] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589ec8 [0054.166] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d78 [0054.166] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589e48 [0054.166] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589d68 [0054.166] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589688 [0054.166] GetLastError () returned 0x12 [0054.166] SetLastError (dwErrCode=0x12) [0054.166] GetLastError () returned 0x12 [0054.167] SetLastError (dwErrCode=0x12) [0054.167] GetLastError () returned 0x12 [0054.167] SetLastError (dwErrCode=0x12) [0054.167] GetLastError () returned 0x12 [0054.167] SetLastError (dwErrCode=0x12) [0054.167] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589eb8 [0054.167] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589df8 [0054.167] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589f08 [0054.167] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589d28 [0054.167] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c5a8 [0054.167] GetLastError () returned 0x12 [0054.167] SetLastError (dwErrCode=0x12) [0054.167] GetLastError () returned 0x12 [0054.167] SetLastError (dwErrCode=0x12) [0054.167] GetLastError () returned 0x12 [0054.167] SetLastError (dwErrCode=0x12) [0054.167] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589868 [0054.167] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589b08 | out: hHeap=0x570000) returned 1 [0054.167] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589988 [0054.167] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589868 | out: hHeap=0x570000) returned 1 [0054.167] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xac) returned 0x5906b0 [0054.167] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x590768 [0054.167] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0054.167] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x58e0f0 [0054.167] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590768 | out: hHeap=0x570000) returned 1 [0054.167] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10e) returned 0x590768 [0054.167] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x58d968 [0054.167] GetLastError () returned 0x12 [0054.167] SetLastError (dwErrCode=0x12) [0054.167] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda44, cchData=2 | out: lpLCData="0") returned 2 [0054.167] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58fd30 [0054.167] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x590880 [0054.168] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x583530 [0054.168] GetLastError () returned 0x12 [0054.168] SetLastError (dwErrCode=0x12) [0054.168] GetLastError () returned 0x12 [0054.168] SetLastError (dwErrCode=0x12) [0054.168] GetLastError () returned 0x12 [0054.168] SetLastError (dwErrCode=0x12) [0054.168] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f58 | out: hHeap=0x570000) returned 1 [0054.168] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589f58 [0054.168] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589dd8 [0054.168] GetLastError () returned 0x12 [0054.168] SetLastError (dwErrCode=0x12) [0054.168] GetLastError () returned 0x12 [0054.168] SetLastError (dwErrCode=0x12) [0054.168] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x590d10 [0054.168] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x590dd0 [0054.168] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590dd0 | out: hHeap=0x570000) returned 1 [0054.168] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f38 | out: hHeap=0x570000) returned 1 [0054.168] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e1b0 | out: hHeap=0x570000) returned 1 [0054.168] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589dd8 | out: hHeap=0x570000) returned 1 [0054.168] GetLastError () returned 0x12 [0054.168] SetLastError (dwErrCode=0x12) [0054.168] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589dd8 [0054.168] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a028 | out: hHeap=0x570000) returned 1 [0054.168] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a098 | out: hHeap=0x570000) returned 1 [0054.168] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58faf8 | out: hHeap=0x570000) returned 1 [0054.168] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f928 | out: hHeap=0x570000) returned 1 [0054.168] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0054.168] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589988 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5834f0 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f58 | out: hHeap=0x570000) returned 1 [0054.169] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589f38 [0054.169] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58dcd8 [0054.169] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58da58 [0054.169] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x30) returned 0x5889e8 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58da58 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58dcd8 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x583530 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590880 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fd30 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5906b0 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590768 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d968 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c5a8 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589eb8 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589df8 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f08 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d28 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589688 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ec8 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d78 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e48 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d68 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589628 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ea8 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e28 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e98 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fe20 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ed8 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fca0 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fc88 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5815f0 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ef8 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e08 | out: hHeap=0x570000) returned 1 [0054.169] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5904a8 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c418 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5834b0 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590018 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fc40 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f9e0 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58db48 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c5f8 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589de8 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d58 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d18 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e38 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589808 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f18 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f98 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d98 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ee8 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589c88 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f88 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0b8 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fb8 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bc18 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0a8 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579448 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b8b8 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581430 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a088 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fd8 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f720 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c198 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579430 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589b68 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579f68 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579538 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c008 | out: hHeap=0x570000) returned 1 [0054.170] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a048 | out: hHeap=0x570000) returned 1 [0054.171] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a078 | out: hHeap=0x570000) returned 1 [0054.171] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f28 | out: hHeap=0x570000) returned 1 [0054.171] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fe8 | out: hHeap=0x570000) returned 1 [0054.171] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5897a8 | out: hHeap=0x570000) returned 1 [0054.171] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fa8 | out: hHeap=0x570000) returned 1 [0054.171] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fc8 | out: hHeap=0x570000) returned 1 [0054.171] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a068 | out: hHeap=0x570000) returned 1 [0054.171] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a018 | out: hHeap=0x570000) returned 1 [0054.171] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5895c8 | out: hHeap=0x570000) returned 1 [0054.171] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f48 | out: hHeap=0x570000) returned 1 [0054.171] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a008 | out: hHeap=0x570000) returned 1 [0054.171] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a058 | out: hHeap=0x570000) returned 1 [0054.171] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5794d8 | out: hHeap=0x570000) returned 1 [0054.171] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0d8 | out: hHeap=0x570000) returned 1 [0054.171] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0c8 | out: hHeap=0x570000) returned 1 [0054.171] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f68 | out: hHeap=0x570000) returned 1 [0054.171] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ff8 | out: hHeap=0x570000) returned 1 [0054.171] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5813d0 | out: hHeap=0x570000) returned 1 [0054.171] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f78 | out: hHeap=0x570000) returned 1 [0054.171] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a038 | out: hHeap=0x570000) returned 1 [0054.171] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ba78 | out: hHeap=0x570000) returned 1 [0054.171] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5815b0 | out: hHeap=0x570000) returned 1 [0054.171] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58bc80 | out: hHeap=0x570000) returned 1 [0054.171] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f38 | out: hHeap=0x570000) returned 1 [0054.171] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58df08 | out: hHeap=0x570000) returned 1 [0054.171] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x22) returned 0x580cc8 [0054.171] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5889e8 | out: hHeap=0x570000) returned 1 [0054.171] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x210 [0054.181] Process32FirstW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0054.182] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0054.183] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0054.184] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0054.184] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0054.185] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0054.186] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0054.187] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0054.188] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0054.189] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.190] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0054.190] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0054.191] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.192] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0054.193] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x54, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.194] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.195] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.196] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.197] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.198] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.198] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.199] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.200] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.201] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.202] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0054.203] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.205] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0054.205] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0054.206] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.207] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0054.208] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0054.209] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0054.210] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0054.210] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0054.211] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0054.212] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0054.213] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0054.214] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0054.215] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending-windsor.exe")) returned 1 [0054.216] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="workers_offline_scripts.exe")) returned 1 [0054.217] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sharesamerican.exe")) returned 1 [0054.217] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x764, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="clara-cancer-holder.exe")) returned 1 [0054.218] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="authoracrossci.exe")) returned 1 [0054.219] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="critics_herbal_amplifier.exe")) returned 1 [0054.220] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hugestdlook.exe")) returned 1 [0054.221] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="terraceregistered.exe")) returned 1 [0054.222] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x514, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="poly_actually.exe")) returned 1 [0054.223] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="inn.exe")) returned 1 [0054.223] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fluidheating.exe")) returned 1 [0054.224] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0054.225] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="qualifications.exe")) returned 1 [0054.226] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="lauderdale transmitted washer.exe")) returned 1 [0054.227] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane.exe")) returned 1 [0054.228] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="saving.exe")) returned 1 [0054.229] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd40, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fred_j_species.exe")) returned 1 [0054.230] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="poster.exe")) returned 1 [0054.230] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept cheaper.exe")) returned 1 [0054.231] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="shooting.exe")) returned 1 [0054.232] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="protection.exe")) returned 1 [0054.233] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0054.234] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0054.235] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0054.236] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0054.236] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0054.237] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0054.238] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0054.239] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0054.240] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0054.241] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0054.241] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0054.246] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0054.247] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0054.247] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0054.248] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0054.249] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0054.250] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0054.251] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0054.252] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0054.252] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0054.253] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0054.254] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0054.255] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0054.256] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0054.257] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0054.257] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0054.281] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0054.282] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0054.283] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0054.284] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0054.285] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0054.285] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0054.286] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0054.287] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0054.288] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0054.289] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0054.290] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0054.291] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0054.292] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0054.292] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0054.293] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0054.294] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0054.295] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0054.296] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bra acoustic sink.exe")) returned 1 [0054.297] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="langaprsubmit.exe")) returned 1 [0054.298] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1110, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0054.298] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0054.299] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0054.305] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0054.306] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0054.307] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0054.308] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0054.309] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x126c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.310] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11fc, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0054.310] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11e4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0054.311] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1170, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0054.312] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1170, pcPriClassBase=8, dwFlags=0x0, szExeFile="vinfk.exe")) returned 1 [0054.313] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.314] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0054.314] CloseHandle (hObject=0x210) returned 1 [0054.315] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58dc10 | out: hHeap=0x570000) returned 1 [0054.315] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0c0 | out: hHeap=0x570000) returned 1 [0054.315] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58df08 [0054.315] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58e0c0 [0054.315] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0c0 | out: hHeap=0x570000) returned 1 [0054.315] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x5834b0 [0054.315] GetLastError () returned 0x12 [0054.315] SetLastError (dwErrCode=0x12) [0054.315] GetLastError () returned 0x12 [0054.315] SetLastError (dwErrCode=0x12) [0054.315] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57b428 [0054.315] SetLastError (dwErrCode=0x12) [0054.315] SetLastError (dwErrCode=0x12) [0054.315] GetLastError () returned 0x12 [0054.315] SetLastError (dwErrCode=0x12) [0054.315] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e0f0 [0054.315] SetLastError (dwErrCode=0x12) [0054.315] SetLastError (dwErrCode=0x12) [0054.315] GetLastError () returned 0x12 [0054.316] SetLastError (dwErrCode=0x12) [0054.316] GetLastError () returned 0x12 [0054.316] SetLastError (dwErrCode=0x12) [0054.316] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589de8 [0054.316] GetLastError () returned 0x12 [0054.316] SetLastError (dwErrCode=0x12) [0054.316] GetLastError () returned 0x12 [0054.316] SetLastError (dwErrCode=0x12) [0054.316] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e1b0 [0054.316] SetLastError (dwErrCode=0x12) [0054.316] SetLastError (dwErrCode=0x12) [0054.316] GetLastError () returned 0x12 [0054.316] SetLastError (dwErrCode=0x12) [0054.316] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e0f0 [0054.316] SetLastError (dwErrCode=0x12) [0054.316] SetLastError (dwErrCode=0x12) [0054.316] GetLastError () returned 0x12 [0054.316] SetLastError (dwErrCode=0x12) [0054.316] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e1b0 [0054.316] SetLastError (dwErrCode=0x12) [0054.316] SetLastError (dwErrCode=0x12) [0054.316] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58ba78 [0054.316] GetLastError () returned 0x12 [0054.316] SetLastError (dwErrCode=0x12) [0054.316] GetLastError () returned 0x12 [0054.316] SetLastError (dwErrCode=0x12) [0054.316] SetLastError (dwErrCode=0x12) [0054.317] GetLastError () returned 0x12 [0054.317] SetLastError (dwErrCode=0x12) [0054.317] GetLastError () returned 0x12 [0054.317] SetLastError (dwErrCode=0x12) [0054.317] GetLastError () returned 0x12 [0054.317] SetLastError (dwErrCode=0x12) [0054.317] GetLastError () returned 0x12 [0054.317] SetLastError (dwErrCode=0x12) [0054.317] GetLastError () returned 0x12 [0054.317] SetLastError (dwErrCode=0x12) [0054.317] GetLastError () returned 0x12 [0054.317] SetLastError (dwErrCode=0x12) [0054.317] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589da8 [0054.317] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x6) returned 0x589d18 [0054.317] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x5) returned 0x589d78 [0054.317] SetLastError (dwErrCode=0x12) [0054.317] GetLastError () returned 0x12 [0054.317] SetLastError (dwErrCode=0x12) [0054.317] SetLastError (dwErrCode=0x12) [0054.317] GetLastError () returned 0x12 [0054.317] SetLastError (dwErrCode=0x12) [0054.317] GetLastError () returned 0x12 [0054.317] SetLastError (dwErrCode=0x12) [0054.317] GetLastError () returned 0x12 [0054.317] SetLastError (dwErrCode=0x12) [0054.317] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e08 [0054.317] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589ea8 [0054.317] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589d48 [0054.317] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589ec8 [0054.317] SetLastError (dwErrCode=0x12) [0054.317] GetLastError () returned 0x12 [0054.318] SetLastError (dwErrCode=0x12) [0054.318] GetLastError () returned 0x12 [0054.318] SetLastError (dwErrCode=0x12) [0054.318] GetLastError () returned 0x12 [0054.318] SetLastError (dwErrCode=0x12) [0054.318] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589ed8 [0054.318] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589db8 [0054.318] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589ef8 [0054.318] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589e28 [0054.318] SetLastError (dwErrCode=0x12) [0054.318] GetLastError () returned 0x12 [0054.318] SetLastError (dwErrCode=0x12) [0054.318] GetLastError () returned 0x12 [0054.318] SetLastError (dwErrCode=0x12) [0054.318] SetLastError (dwErrCode=0x12) [0054.318] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda68, cchData=2 | out: lpLCData="0") returned 2 [0054.318] SetLastError (dwErrCode=0x12) [0054.318] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58f720 [0054.318] GetLastError () returned 0x12 [0054.318] SetLastError (dwErrCode=0x12) [0054.318] GetLastError () returned 0x12 [0054.318] SetLastError (dwErrCode=0x12) [0054.318] GetLastError () returned 0x12 [0054.318] SetLastError (dwErrCode=0x12) [0054.318] GetLastError () returned 0x12 [0054.318] SetLastError (dwErrCode=0x12) [0054.318] GetLastError () returned 0x12 [0054.318] SetLastError (dwErrCode=0x12) [0054.318] SetLastError (dwErrCode=0x12) [0054.318] GetLastError () returned 0x12 [0054.318] SetLastError (dwErrCode=0x12) [0054.319] GetLastError () returned 0x12 [0054.319] SetLastError (dwErrCode=0x12) [0054.319] GetLastError () returned 0x12 [0054.319] SetLastError (dwErrCode=0x12) [0054.319] GetLastError () returned 0x12 [0054.319] SetLastError (dwErrCode=0x12) [0054.319] GetLastError () returned 0x12 [0054.319] SetLastError (dwErrCode=0x12) [0054.319] GetLastError () returned 0x12 [0054.319] SetLastError (dwErrCode=0x12) [0054.319] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f08 [0054.319] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x5794d8 [0054.319] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x57b8b8 [0054.319] SetLastError (dwErrCode=0x12) [0054.319] GetLastError () returned 0x12 [0054.319] SetLastError (dwErrCode=0x12) [0054.319] SetLastError (dwErrCode=0x12) [0054.319] GetLastError () returned 0x12 [0054.319] SetLastError (dwErrCode=0x12) [0054.319] GetLastError () returned 0x12 [0054.319] SetLastError (dwErrCode=0x12) [0054.319] GetLastError () returned 0x12 [0054.319] SetLastError (dwErrCode=0x12) [0054.319] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589d58 [0054.319] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d68 [0054.319] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589e18 [0054.319] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589d88 [0054.319] SetLastError (dwErrCode=0x12) [0054.319] GetLastError () returned 0x12 [0054.319] SetLastError (dwErrCode=0x12) [0054.320] GetLastError () returned 0x12 [0054.320] SetLastError (dwErrCode=0x12) [0054.320] GetLastError () returned 0x12 [0054.320] SetLastError (dwErrCode=0x12) [0054.320] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589d98 [0054.320] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589f48 [0054.320] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589f98 [0054.320] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x58a038 [0054.320] SetLastError (dwErrCode=0x12) [0054.320] GetLastError () returned 0x12 [0054.320] SetLastError (dwErrCode=0x12) [0054.320] GetLastError () returned 0x12 [0054.320] SetLastError (dwErrCode=0x12) [0054.320] SetLastError (dwErrCode=0x12) [0054.320] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda54, cchData=2 | out: lpLCData="0") returned 2 [0054.320] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58fd00 [0054.320] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x590018 [0054.320] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x5834f0 [0054.320] GetLastError () returned 0x12 [0054.320] SetLastError (dwErrCode=0x12) [0054.320] GetLastError () returned 0x12 [0054.320] SetLastError (dwErrCode=0x12) [0054.320] GetLastError () returned 0x12 [0054.320] SetLastError (dwErrCode=0x12) [0054.320] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c2d8 [0054.321] GetLastError () returned 0x12 [0054.321] SetLastError (dwErrCode=0x12) [0054.321] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x5904a8 [0054.321] GetLastError () returned 0x12 [0054.321] SetLastError (dwErrCode=0x12) [0054.321] GetLastError () returned 0x12 [0054.321] SetLastError (dwErrCode=0x12) [0054.321] GetLastError () returned 0x12 [0054.321] SetLastError (dwErrCode=0x12) [0054.321] GetLastError () returned 0x12 [0054.321] SetLastError (dwErrCode=0x12) [0054.321] GetLastError () returned 0x12 [0054.321] SetLastError (dwErrCode=0x12) [0054.321] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a078 [0054.321] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f68 [0054.321] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581650 [0054.321] GetLastError () returned 0x12 [0054.321] SetLastError (dwErrCode=0x12) [0054.321] GetLastError () returned 0x12 [0054.321] SetLastError (dwErrCode=0x12) [0054.321] GetLastError () returned 0x12 [0054.321] SetLastError (dwErrCode=0x12) [0054.321] GetLastError () returned 0x12 [0054.321] SetLastError (dwErrCode=0x12) [0054.321] GetLastError () returned 0x12 [0054.321] SetLastError (dwErrCode=0x12) [0054.321] GetLastError () returned 0x12 [0054.321] SetLastError (dwErrCode=0x12) [0054.321] GetLastError () returned 0x12 [0054.321] SetLastError (dwErrCode=0x12) [0054.321] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f18 [0054.321] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x58fca0 [0054.322] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x58ff10 [0054.322] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x58fd78 [0054.322] GetLastError () returned 0x12 [0054.322] SetLastError (dwErrCode=0x12) [0054.322] GetLastError () returned 0x12 [0054.322] SetLastError (dwErrCode=0x12) [0054.322] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a0a8 [0054.322] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589fa8 [0054.322] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589fe8 [0054.322] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589868 [0054.322] GetLastError () returned 0x12 [0054.322] SetLastError (dwErrCode=0x12) [0054.322] GetLastError () returned 0x12 [0054.322] SetLastError (dwErrCode=0x12) [0054.322] GetLastError () returned 0x12 [0054.322] SetLastError (dwErrCode=0x12) [0054.322] GetLastError () returned 0x12 [0054.322] SetLastError (dwErrCode=0x12) [0054.322] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f88 [0054.322] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a088 [0054.322] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589f78 [0054.322] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x58a0b8 [0054.322] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x5898c8 [0054.322] GetLastError () returned 0x12 [0054.322] SetLastError (dwErrCode=0x12) [0054.322] GetLastError () returned 0x12 [0054.322] SetLastError (dwErrCode=0x12) [0054.323] GetLastError () returned 0x12 [0054.323] SetLastError (dwErrCode=0x12) [0054.323] GetLastError () returned 0x12 [0054.323] SetLastError (dwErrCode=0x12) [0054.323] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a098 [0054.323] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a0c8 [0054.323] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a0d8 [0054.323] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589f58 [0054.323] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c468 [0054.323] GetLastError () returned 0x12 [0054.323] SetLastError (dwErrCode=0x12) [0054.323] GetLastError () returned 0x12 [0054.323] SetLastError (dwErrCode=0x12) [0054.323] GetLastError () returned 0x12 [0054.323] SetLastError (dwErrCode=0x12) [0054.323] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589928 [0054.323] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589688 | out: hHeap=0x570000) returned 1 [0054.323] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589c28 [0054.323] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589928 | out: hHeap=0x570000) returned 1 [0054.323] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xac) returned 0x5906b0 [0054.323] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x590768 [0054.323] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0054.323] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x58e0f0 [0054.323] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590768 | out: hHeap=0x570000) returned 1 [0054.323] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10e) returned 0x590768 [0054.323] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x58d940 [0054.323] GetLastError () returned 0x12 [0054.323] SetLastError (dwErrCode=0x12) [0054.323] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda44, cchData=2 | out: lpLCData="0") returned 2 [0054.323] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58fd30 [0054.323] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x590880 [0054.324] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x583530 [0054.324] GetLastError () returned 0x12 [0054.324] SetLastError (dwErrCode=0x12) [0054.324] GetLastError () returned 0x12 [0054.324] SetLastError (dwErrCode=0x12) [0054.324] GetLastError () returned 0x12 [0054.324] SetLastError (dwErrCode=0x12) [0054.324] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ee8 | out: hHeap=0x570000) returned 1 [0054.324] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589ee8 [0054.324] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589fb8 [0054.324] GetLastError () returned 0x12 [0054.324] SetLastError (dwErrCode=0x12) [0054.324] GetLastError () returned 0x12 [0054.324] SetLastError (dwErrCode=0x12) [0054.324] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x590d10 [0054.324] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x590dd0 [0054.324] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590dd0 | out: hHeap=0x570000) returned 1 [0054.324] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589dd8 | out: hHeap=0x570000) returned 1 [0054.324] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e1b0 | out: hHeap=0x570000) returned 1 [0054.324] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fb8 | out: hHeap=0x570000) returned 1 [0054.324] GetLastError () returned 0x12 [0054.324] SetLastError (dwErrCode=0x12) [0054.324] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589fb8 [0054.324] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e48 | out: hHeap=0x570000) returned 1 [0054.324] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e38 | out: hHeap=0x570000) returned 1 [0054.324] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58faf8 | out: hHeap=0x570000) returned 1 [0054.324] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f928 | out: hHeap=0x570000) returned 1 [0054.324] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0054.324] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589c28 | out: hHeap=0x570000) returned 1 [0054.324] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5834f0 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ee8 | out: hHeap=0x570000) returned 1 [0054.325] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589dd8 [0054.325] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58da08 [0054.325] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58dd28 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58da08 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x583530 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590880 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fd30 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5906b0 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590768 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d940 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c468 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a098 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0c8 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0d8 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f58 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5898c8 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f88 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a088 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f78 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0b8 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589868 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fe8 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fa8 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0a8 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fd78 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f18 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fca0 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ff10 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581650 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f68 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a078 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5904a8 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c2d8 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5834b0 | out: hHeap=0x570000) returned 1 [0054.325] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590018 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fd00 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f9e0 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58db20 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c418 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d98 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f48 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f98 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a038 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589988 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d58 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d68 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e18 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d88 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589aa8 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e98 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e88 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589de8 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bc18 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f08 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5794d8 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b8b8 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581350 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589dc8 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589df8 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f720 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c0a8 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579448 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589bc8 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579f68 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579538 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c0f8 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ed8 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589db8 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ef8 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e28 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589808 | out: hHeap=0x570000) returned 1 [0054.326] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e08 | out: hHeap=0x570000) returned 1 [0054.327] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ea8 | out: hHeap=0x570000) returned 1 [0054.327] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d48 | out: hHeap=0x570000) returned 1 [0054.327] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ec8 | out: hHeap=0x570000) returned 1 [0054.327] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5897a8 | out: hHeap=0x570000) returned 1 [0054.327] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d28 | out: hHeap=0x570000) returned 1 [0054.327] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e78 | out: hHeap=0x570000) returned 1 [0054.327] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e68 | out: hHeap=0x570000) returned 1 [0054.327] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579430 | out: hHeap=0x570000) returned 1 [0054.327] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d38 | out: hHeap=0x570000) returned 1 [0054.327] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589da8 | out: hHeap=0x570000) returned 1 [0054.327] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d18 | out: hHeap=0x570000) returned 1 [0054.327] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d78 | out: hHeap=0x570000) returned 1 [0054.327] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5813d0 | out: hHeap=0x570000) returned 1 [0054.327] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589eb8 | out: hHeap=0x570000) returned 1 [0054.327] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e58 | out: hHeap=0x570000) returned 1 [0054.327] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ba78 | out: hHeap=0x570000) returned 1 [0054.327] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581530 | out: hHeap=0x570000) returned 1 [0054.327] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58bc80 | out: hHeap=0x570000) returned 1 [0054.327] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589dd8 | out: hHeap=0x570000) returned 1 [0054.327] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0c0 | out: hHeap=0x570000) returned 1 [0054.327] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581530 [0054.327] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58dd28 | out: hHeap=0x570000) returned 1 [0054.327] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x218 [0054.337] Process32FirstW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0054.338] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0054.339] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0054.340] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0054.354] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0054.354] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0054.355] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0054.356] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0054.357] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0054.358] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.359] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0054.359] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0054.360] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.361] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0054.362] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x54, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.363] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.364] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.365] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.365] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.366] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.368] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.369] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.369] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.370] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.371] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0054.372] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.373] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0054.374] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0054.375] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.375] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0054.376] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0054.377] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0054.378] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0054.379] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0054.380] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0054.381] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0054.381] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0054.382] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0054.387] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending-windsor.exe")) returned 1 [0054.388] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="workers_offline_scripts.exe")) returned 1 [0054.389] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sharesamerican.exe")) returned 1 [0054.390] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x764, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="clara-cancer-holder.exe")) returned 1 [0054.390] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="authoracrossci.exe")) returned 1 [0054.391] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="critics_herbal_amplifier.exe")) returned 1 [0054.392] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hugestdlook.exe")) returned 1 [0054.393] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="terraceregistered.exe")) returned 1 [0054.394] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x514, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="poly_actually.exe")) returned 1 [0054.395] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="inn.exe")) returned 1 [0054.395] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fluidheating.exe")) returned 1 [0054.422] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0054.422] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="qualifications.exe")) returned 1 [0054.423] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="lauderdale transmitted washer.exe")) returned 1 [0054.424] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane.exe")) returned 1 [0054.425] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="saving.exe")) returned 1 [0054.426] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd40, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fred_j_species.exe")) returned 1 [0054.427] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="poster.exe")) returned 1 [0054.427] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept cheaper.exe")) returned 1 [0054.428] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="shooting.exe")) returned 1 [0054.429] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="protection.exe")) returned 1 [0054.439] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0054.441] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0054.452] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0054.486] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0054.486] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0054.487] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0054.488] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0054.489] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0054.490] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0054.491] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0054.492] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0054.493] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0054.493] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0054.494] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0054.495] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0054.496] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0054.497] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0054.498] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0054.499] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0054.499] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0054.500] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0054.501] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0054.502] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0054.503] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0054.504] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0054.504] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0054.505] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0054.506] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0054.507] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0054.518] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0054.519] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0054.520] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0054.521] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0054.522] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0054.523] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0054.524] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0054.524] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0054.525] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0054.526] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0054.527] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0054.528] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0054.529] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0054.530] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0054.531] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bra acoustic sink.exe")) returned 1 [0054.531] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="langaprsubmit.exe")) returned 1 [0054.532] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1110, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0054.533] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0054.534] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0054.535] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0054.536] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0054.537] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0054.537] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0054.538] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x126c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.539] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11fc, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0054.540] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11e4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0054.541] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1170, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0054.542] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1170, pcPriClassBase=8, dwFlags=0x0, szExeFile="vinfk.exe")) returned 1 [0054.543] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.544] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0054.544] CloseHandle (hObject=0x218) returned 1 [0054.544] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58df08 | out: hHeap=0x570000) returned 1 [0054.544] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x30) returned 0x588550 [0054.544] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58df08 [0054.544] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58df08 | out: hHeap=0x570000) returned 1 [0054.545] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58e0c0 [0054.545] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58df08 [0054.545] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0c0 | out: hHeap=0x570000) returned 1 [0054.545] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x5834b0 [0054.545] GetLastError () returned 0x12 [0054.545] SetLastError (dwErrCode=0x12) [0054.545] GetLastError () returned 0x12 [0054.545] SetLastError (dwErrCode=0x12) [0054.545] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57b428 [0054.545] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0054.545] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0054.545] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fb8 | out: hHeap=0x570000) returned 1 [0054.545] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590d10 | out: hHeap=0x570000) returned 1 [0054.545] GetLastError () returned 0x12 [0054.545] SetLastError (dwErrCode=0x12) [0054.545] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589eb8 [0054.545] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589e98 [0054.545] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589d98 [0054.545] GetLastError () returned 0x12 [0054.545] SetLastError (dwErrCode=0x12) [0054.545] GetLastError () returned 0x12 [0054.545] SetLastError (dwErrCode=0x12) [0054.545] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e0f0 [0054.545] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0054.545] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0054.545] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589eb8 | out: hHeap=0x570000) returned 1 [0054.546] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0054.546] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d98 | out: hHeap=0x570000) returned 1 [0054.546] GetLastError () returned 0x12 [0054.546] SetLastError (dwErrCode=0x12) [0054.546] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589d48 [0054.546] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589ed8 [0054.546] GetLastError () returned 0x12 [0054.546] SetLastError (dwErrCode=0x12) [0054.546] GetLastError () returned 0x12 [0054.546] SetLastError (dwErrCode=0x12) [0054.546] GetLastError () returned 0x12 [0054.546] SetLastError (dwErrCode=0x12) [0054.546] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589e88 [0054.546] GetLastError () returned 0x12 [0054.546] SetLastError (dwErrCode=0x12) [0054.546] GetLastError () returned 0x12 [0054.546] SetLastError (dwErrCode=0x12) [0054.546] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e1b0 [0054.546] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0054.546] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0054.546] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d48 | out: hHeap=0x570000) returned 1 [0054.546] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0054.546] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e88 | out: hHeap=0x570000) returned 1 [0054.546] GetLastError () returned 0x12 [0054.546] SetLastError (dwErrCode=0x12) [0054.546] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589f08 [0054.546] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ed8 | out: hHeap=0x570000) returned 1 [0054.546] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e98 | out: hHeap=0x570000) returned 1 [0054.546] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58e0c0 [0054.546] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589ea8 [0054.547] GetLastError () returned 0x12 [0054.547] SetLastError (dwErrCode=0x12) [0054.547] GetLastError () returned 0x12 [0054.547] SetLastError (dwErrCode=0x12) [0054.547] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e0f0 [0054.547] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0054.547] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0054.547] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f08 | out: hHeap=0x570000) returned 1 [0054.547] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e1b0 | out: hHeap=0x570000) returned 1 [0054.547] GetLastError () returned 0x12 [0054.547] SetLastError (dwErrCode=0x12) [0054.547] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589ec8 [0054.547] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589d58 [0054.547] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589d28 [0054.547] GetLastError () returned 0x12 [0054.547] SetLastError (dwErrCode=0x12) [0054.547] GetLastError () returned 0x12 [0054.547] SetLastError (dwErrCode=0x12) [0054.547] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e1b0 [0054.547] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0054.547] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0054.547] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ec8 | out: hHeap=0x570000) returned 1 [0054.547] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0054.547] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d28 | out: hHeap=0x570000) returned 1 [0054.547] GetLastError () returned 0x12 [0054.547] SetLastError (dwErrCode=0x12) [0054.547] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589eb8 [0054.548] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589ec8 [0054.548] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5815b0 [0054.548] GetLastError () returned 0x12 [0054.548] SetLastError (dwErrCode=0x12) [0054.548] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58ba78 [0054.548] GetLastError () returned 0x12 [0054.548] SetLastError (dwErrCode=0x12) [0054.548] GetLastError () returned 0x12 [0054.548] SetLastError (dwErrCode=0x12) [0054.548] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xa0) returned 0x58bc80 [0054.548] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d68 [0054.548] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589ed8 [0054.548] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5815d0 [0054.548] GetLastError () returned 0x12 [0054.548] SetLastError (dwErrCode=0x12) [0054.548] GetLastError () returned 0x12 [0054.548] SetLastError (dwErrCode=0x12) [0054.548] GetLastError () returned 0x12 [0054.548] SetLastError (dwErrCode=0x12) [0054.548] GetLastError () returned 0x12 [0054.548] SetLastError (dwErrCode=0x12) [0054.548] GetLastError () returned 0x12 [0054.548] SetLastError (dwErrCode=0x12) [0054.548] GetLastError () returned 0x12 [0054.548] SetLastError (dwErrCode=0x12) [0054.548] GetLastError () returned 0x12 [0054.548] SetLastError (dwErrCode=0x12) [0054.548] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589ee8 [0054.548] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x6) returned 0x589e58 [0054.548] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x5) returned 0x589e88 [0054.548] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589db8 [0054.549] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x579430 [0054.549] GetLastError () returned 0x12 [0054.549] SetLastError (dwErrCode=0x12) [0054.549] GetLastError () returned 0x12 [0054.549] SetLastError (dwErrCode=0x12) [0054.549] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d88 [0054.549] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d78 [0054.549] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589ef8 [0054.549] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589868 [0054.549] GetLastError () returned 0x12 [0054.549] SetLastError (dwErrCode=0x12) [0054.549] GetLastError () returned 0x12 [0054.549] SetLastError (dwErrCode=0x12) [0054.549] GetLastError () returned 0x12 [0054.549] SetLastError (dwErrCode=0x12) [0054.549] GetLastError () returned 0x12 [0054.549] SetLastError (dwErrCode=0x12) [0054.549] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f08 [0054.549] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e08 [0054.549] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589d98 [0054.549] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589e18 [0054.549] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589bc8 [0054.549] GetLastError () returned 0x12 [0054.549] SetLastError (dwErrCode=0x12) [0054.549] GetLastError () returned 0x12 [0054.549] SetLastError (dwErrCode=0x12) [0054.549] GetLastError () returned 0x12 [0054.549] SetLastError (dwErrCode=0x12) [0054.549] GetLastError () returned 0x12 [0054.550] SetLastError (dwErrCode=0x12) [0054.550] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589d48 [0054.550] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589d18 [0054.550] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e98 [0054.550] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589da8 [0054.550] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c468 [0054.550] GetLastError () returned 0x12 [0054.550] SetLastError (dwErrCode=0x12) [0054.550] GetLastError () returned 0x12 [0054.550] SetLastError (dwErrCode=0x12) [0054.550] GetLastError () returned 0x12 [0054.550] SetLastError (dwErrCode=0x12) [0054.550] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x5898c8 [0054.550] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x5895c8 [0054.550] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5898c8 | out: hHeap=0x570000) returned 1 [0054.550] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x56) returned 0x5898c8 [0054.550] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x579f68 [0054.550] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x58e0f0 [0054.550] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579f68 | out: hHeap=0x570000) returned 1 [0054.550] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x87) returned 0x579f68 [0054.550] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xd) returned 0x5794d8 [0054.550] GetLastError () returned 0x12 [0054.550] SetLastError (dwErrCode=0x12) [0054.550] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda68, cchData=2 | out: lpLCData="0") returned 2 [0054.550] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x579448 [0054.550] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x58f290 [0054.550] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c0a8 [0054.550] GetLastError () returned 0x12 [0054.550] SetLastError (dwErrCode=0x12) [0054.550] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58f720 [0054.550] GetLastError () returned 0x12 [0054.550] SetLastError (dwErrCode=0x12) [0054.551] GetLastError () returned 0x12 [0054.551] SetLastError (dwErrCode=0x12) [0054.551] GetLastError () returned 0x12 [0054.551] SetLastError (dwErrCode=0x12) [0054.551] GetLastError () returned 0x12 [0054.551] SetLastError (dwErrCode=0x12) [0054.551] GetLastError () returned 0x12 [0054.551] SetLastError (dwErrCode=0x12) [0054.551] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d28 [0054.551] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d38 [0054.551] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5813d0 [0054.551] GetLastError () returned 0x12 [0054.551] SetLastError (dwErrCode=0x12) [0054.551] GetLastError () returned 0x12 [0054.551] SetLastError (dwErrCode=0x12) [0054.551] GetLastError () returned 0x12 [0054.551] SetLastError (dwErrCode=0x12) [0054.551] GetLastError () returned 0x12 [0054.551] SetLastError (dwErrCode=0x12) [0054.551] GetLastError () returned 0x12 [0054.551] SetLastError (dwErrCode=0x12) [0054.551] GetLastError () returned 0x12 [0054.551] SetLastError (dwErrCode=0x12) [0054.551] GetLastError () returned 0x12 [0054.551] SetLastError (dwErrCode=0x12) [0054.551] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589dc8 [0054.551] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x579538 [0054.551] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x57b8b8 [0054.551] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x57bc18 [0054.551] GetLastError () returned 0x12 [0054.551] SetLastError (dwErrCode=0x12) [0054.552] GetLastError () returned 0x12 [0054.552] SetLastError (dwErrCode=0x12) [0054.552] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e48 [0054.552] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e68 [0054.552] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e78 [0054.552] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589688 [0054.552] GetLastError () returned 0x12 [0054.552] SetLastError (dwErrCode=0x12) [0054.552] GetLastError () returned 0x12 [0054.552] SetLastError (dwErrCode=0x12) [0054.552] GetLastError () returned 0x12 [0054.552] SetLastError (dwErrCode=0x12) [0054.552] GetLastError () returned 0x12 [0054.552] SetLastError (dwErrCode=0x12) [0054.552] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589dd8 [0054.552] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589de8 [0054.552] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589df8 [0054.552] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589e28 [0054.552] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589c88 [0054.552] GetLastError () returned 0x12 [0054.552] SetLastError (dwErrCode=0x12) [0054.552] GetLastError () returned 0x12 [0054.552] SetLastError (dwErrCode=0x12) [0054.552] GetLastError () returned 0x12 [0054.552] SetLastError (dwErrCode=0x12) [0054.552] GetLastError () returned 0x12 [0054.552] SetLastError (dwErrCode=0x12) [0054.552] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e38 [0054.552] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a058 [0054.552] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a008 [0054.553] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589f48 [0054.553] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c058 [0054.553] GetLastError () returned 0x12 [0054.553] SetLastError (dwErrCode=0x12) [0054.553] GetLastError () returned 0x12 [0054.553] SetLastError (dwErrCode=0x12) [0054.553] GetLastError () returned 0x12 [0054.553] SetLastError (dwErrCode=0x12) [0054.553] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x57b428 [0054.553] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x58f928 [0054.553] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0054.553] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xac) returned 0x57b428 [0054.553] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10e) returned 0x58f9e0 [0054.553] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10e) returned 0x58faf8 [0054.553] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f9e0 | out: hHeap=0x570000) returned 1 [0054.553] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10e) returned 0x58f9e0 [0054.553] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x58daa8 [0054.553] GetLastError () returned 0x12 [0054.553] SetLastError (dwErrCode=0x12) [0054.553] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda54, cchData=2 | out: lpLCData="0") returned 2 [0054.553] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58fda8 [0054.553] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x590018 [0054.553] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x5834f0 [0054.553] GetLastError () returned 0x12 [0054.553] SetLastError (dwErrCode=0x12) [0054.553] GetLastError () returned 0x12 [0054.553] SetLastError (dwErrCode=0x12) [0054.553] GetLastError () returned 0x12 [0054.553] SetLastError (dwErrCode=0x12) [0054.553] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c0f8 [0054.553] GetLastError () returned 0x12 [0054.554] SetLastError (dwErrCode=0x12) [0054.554] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x5904a8 [0054.554] GetLastError () returned 0x12 [0054.554] SetLastError (dwErrCode=0x12) [0054.554] GetLastError () returned 0x12 [0054.554] SetLastError (dwErrCode=0x12) [0054.554] GetLastError () returned 0x12 [0054.554] SetLastError (dwErrCode=0x12) [0054.554] GetLastError () returned 0x12 [0054.554] SetLastError (dwErrCode=0x12) [0054.554] GetLastError () returned 0x12 [0054.554] SetLastError (dwErrCode=0x12) [0054.554] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a018 [0054.554] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a028 [0054.554] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5815f0 [0054.554] GetLastError () returned 0x12 [0054.554] SetLastError (dwErrCode=0x12) [0054.554] GetLastError () returned 0x12 [0054.554] SetLastError (dwErrCode=0x12) [0054.554] GetLastError () returned 0x12 [0054.554] SetLastError (dwErrCode=0x12) [0054.554] GetLastError () returned 0x12 [0054.554] SetLastError (dwErrCode=0x12) [0054.554] GetLastError () returned 0x12 [0054.554] SetLastError (dwErrCode=0x12) [0054.554] GetLastError () returned 0x12 [0054.554] SetLastError (dwErrCode=0x12) [0054.554] GetLastError () returned 0x12 [0054.584] SetLastError (dwErrCode=0x12) [0054.584] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f38 [0054.584] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x58fcb8 [0054.584] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x58fe80 [0054.584] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x58fe98 [0054.584] GetLastError () returned 0x12 [0054.584] SetLastError (dwErrCode=0x12) [0054.584] GetLastError () returned 0x12 [0054.584] SetLastError (dwErrCode=0x12) [0054.584] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f88 [0054.584] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a078 [0054.584] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589fa8 [0054.584] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589808 [0054.584] GetLastError () returned 0x12 [0054.584] SetLastError (dwErrCode=0x12) [0054.584] GetLastError () returned 0x12 [0054.584] SetLastError (dwErrCode=0x12) [0054.584] GetLastError () returned 0x12 [0054.585] SetLastError (dwErrCode=0x12) [0054.585] GetLastError () returned 0x12 [0054.585] SetLastError (dwErrCode=0x12) [0054.585] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a038 [0054.585] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589f68 [0054.585] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589fd8 [0054.585] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x58a048 [0054.585] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x5899e8 [0054.585] GetLastError () returned 0x12 [0054.585] SetLastError (dwErrCode=0x12) [0054.585] GetLastError () returned 0x12 [0054.585] SetLastError (dwErrCode=0x12) [0054.585] GetLastError () returned 0x12 [0054.585] SetLastError (dwErrCode=0x12) [0054.585] GetLastError () returned 0x12 [0054.585] SetLastError (dwErrCode=0x12) [0054.585] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a068 [0054.585] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589fb8 [0054.585] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a098 [0054.585] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589f78 [0054.585] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c6e8 [0054.585] GetLastError () returned 0x12 [0054.585] SetLastError (dwErrCode=0x12) [0054.585] GetLastError () returned 0x12 [0054.585] SetLastError (dwErrCode=0x12) [0054.585] GetLastError () returned 0x12 [0054.585] SetLastError (dwErrCode=0x12) [0054.585] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589c28 [0054.585] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5895c8 | out: hHeap=0x570000) returned 1 [0054.585] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589508 [0054.585] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589c28 | out: hHeap=0x570000) returned 1 [0054.585] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xac) returned 0x5906b0 [0054.585] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x590768 [0054.586] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0054.586] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x58e0f0 [0054.586] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590768 | out: hHeap=0x570000) returned 1 [0054.586] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10e) returned 0x590768 [0054.586] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x58da58 [0054.586] GetLastError () returned 0x12 [0054.586] SetLastError (dwErrCode=0x12) [0054.586] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda44, cchData=2 | out: lpLCData="0") returned 2 [0054.586] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58fef8 [0054.586] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x590880 [0054.586] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x583770 [0054.587] GetLastError () returned 0x12 [0054.587] SetLastError (dwErrCode=0x12) [0054.587] GetLastError () returned 0x12 [0054.587] SetLastError (dwErrCode=0x12) [0054.587] GetLastError () returned 0x12 [0054.587] SetLastError (dwErrCode=0x12) [0054.587] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ea8 | out: hHeap=0x570000) returned 1 [0054.587] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589ea8 [0054.587] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589f58 [0054.587] GetLastError () returned 0x12 [0054.587] SetLastError (dwErrCode=0x12) [0054.587] GetLastError () returned 0x12 [0054.587] SetLastError (dwErrCode=0x12) [0054.587] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x590d10 [0054.587] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x590dd0 [0054.587] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590dd0 | out: hHeap=0x570000) returned 1 [0054.587] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589eb8 | out: hHeap=0x570000) returned 1 [0054.587] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e1b0 | out: hHeap=0x570000) returned 1 [0054.587] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f58 | out: hHeap=0x570000) returned 1 [0054.587] GetLastError () returned 0x12 [0054.587] SetLastError (dwErrCode=0x12) [0054.587] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589f18 [0054.587] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ec8 | out: hHeap=0x570000) returned 1 [0054.587] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d58 | out: hHeap=0x570000) returned 1 [0054.587] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58faf8 | out: hHeap=0x570000) returned 1 [0054.587] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f928 | out: hHeap=0x570000) returned 1 [0054.587] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0054.587] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589508 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5834f0 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ea8 | out: hHeap=0x570000) returned 1 [0054.588] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589ea8 [0054.588] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58dd50 [0054.588] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58db48 [0054.588] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x30) returned 0x588908 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58db48 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58dd50 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x583770 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590880 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fef8 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5906b0 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590768 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58da58 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c6e8 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a068 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fb8 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a098 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f78 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5899e8 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a038 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f68 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fd8 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a048 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589808 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fa8 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a078 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f88 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fe98 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f38 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fcb8 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fe80 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5815f0 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a028 | out: hHeap=0x570000) returned 1 [0054.588] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a018 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5904a8 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c0f8 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5834b0 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590018 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fda8 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f9e0 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58daa8 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c058 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e38 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a058 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a008 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f48 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589c88 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589dd8 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589de8 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589df8 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e28 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589688 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e78 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e68 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e48 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bc18 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589dc8 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579538 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b8b8 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5813d0 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d38 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d28 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f720 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c0a8 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579448 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5898c8 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579f68 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5794d8 | out: hHeap=0x570000) returned 1 [0054.589] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c468 | out: hHeap=0x570000) returned 1 [0054.590] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d48 | out: hHeap=0x570000) returned 1 [0054.590] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d18 | out: hHeap=0x570000) returned 1 [0054.590] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e98 | out: hHeap=0x570000) returned 1 [0054.590] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589da8 | out: hHeap=0x570000) returned 1 [0054.590] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589bc8 | out: hHeap=0x570000) returned 1 [0054.590] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f08 | out: hHeap=0x570000) returned 1 [0054.590] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e08 | out: hHeap=0x570000) returned 1 [0054.590] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d98 | out: hHeap=0x570000) returned 1 [0054.590] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e18 | out: hHeap=0x570000) returned 1 [0054.590] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589868 | out: hHeap=0x570000) returned 1 [0054.590] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ef8 | out: hHeap=0x570000) returned 1 [0054.590] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d78 | out: hHeap=0x570000) returned 1 [0054.590] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d88 | out: hHeap=0x570000) returned 1 [0054.590] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579430 | out: hHeap=0x570000) returned 1 [0054.590] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589db8 | out: hHeap=0x570000) returned 1 [0054.590] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ee8 | out: hHeap=0x570000) returned 1 [0054.590] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e58 | out: hHeap=0x570000) returned 1 [0054.590] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e88 | out: hHeap=0x570000) returned 1 [0054.590] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5815d0 | out: hHeap=0x570000) returned 1 [0054.590] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ed8 | out: hHeap=0x570000) returned 1 [0054.590] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d68 | out: hHeap=0x570000) returned 1 [0054.590] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ba78 | out: hHeap=0x570000) returned 1 [0054.590] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5815b0 | out: hHeap=0x570000) returned 1 [0054.590] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58bc80 | out: hHeap=0x570000) returned 1 [0054.590] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ea8 | out: hHeap=0x570000) returned 1 [0054.590] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0c0 | out: hHeap=0x570000) returned 1 [0054.590] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2e) returned 0x588be0 [0054.590] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588908 | out: hHeap=0x570000) returned 1 [0054.590] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x210 [0054.600] Process32FirstW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0054.600] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0054.601] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0054.602] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0054.603] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0054.604] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0054.605] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0054.606] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0054.607] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0054.607] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.608] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0054.609] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0054.610] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.611] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0054.612] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x54, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.613] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.613] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.614] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.615] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.616] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.617] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.619] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.620] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.620] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.621] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0054.622] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.623] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0054.624] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0054.625] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.625] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0054.626] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0054.627] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0054.628] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0054.629] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0054.630] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0054.630] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0054.631] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0054.632] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0054.633] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending-windsor.exe")) returned 1 [0054.634] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="workers_offline_scripts.exe")) returned 1 [0054.635] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sharesamerican.exe")) returned 1 [0054.636] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x764, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="clara-cancer-holder.exe")) returned 1 [0054.637] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="authoracrossci.exe")) returned 1 [0054.637] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="critics_herbal_amplifier.exe")) returned 1 [0054.638] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hugestdlook.exe")) returned 1 [0054.639] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="terraceregistered.exe")) returned 1 [0054.640] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x514, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="poly_actually.exe")) returned 1 [0054.641] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="inn.exe")) returned 1 [0054.642] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fluidheating.exe")) returned 1 [0054.643] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0054.643] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="qualifications.exe")) returned 1 [0054.644] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="lauderdale transmitted washer.exe")) returned 1 [0054.645] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane.exe")) returned 1 [0054.646] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="saving.exe")) returned 1 [0054.647] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd40, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fred_j_species.exe")) returned 1 [0054.648] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="poster.exe")) returned 1 [0054.649] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept cheaper.exe")) returned 1 [0054.649] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="shooting.exe")) returned 1 [0054.650] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="protection.exe")) returned 1 [0054.651] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0054.652] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0054.653] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0054.654] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0054.654] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0054.655] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0054.656] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0054.657] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0054.665] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0054.665] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0054.666] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0054.667] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0054.668] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0054.669] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0054.670] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0054.670] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0054.671] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0054.672] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0054.673] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0054.674] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0054.675] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0054.676] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0054.676] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0054.677] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0054.678] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0054.679] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0054.680] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0054.681] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0054.684] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0054.685] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0054.686] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0054.687] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0054.688] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0054.689] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0054.690] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0054.692] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0054.693] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0054.694] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0054.695] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0054.697] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0054.698] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0054.698] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0054.700] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0054.700] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bra acoustic sink.exe")) returned 1 [0054.702] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="langaprsubmit.exe")) returned 1 [0054.711] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1110, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0054.713] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0054.714] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0054.715] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0054.716] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0054.717] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0054.718] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0054.718] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x126c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.720] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11fc, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0054.720] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11e4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0054.721] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1170, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0054.722] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1170, pcPriClassBase=8, dwFlags=0x0, szExeFile="vinfk.exe")) returned 1 [0054.723] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.724] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0054.725] CloseHandle (hObject=0x210) returned 1 [0054.725] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58df08 | out: hHeap=0x570000) returned 1 [0054.725] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588550 | out: hHeap=0x570000) returned 1 [0054.725] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58df08 [0054.725] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58e0c0 [0054.725] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0c0 | out: hHeap=0x570000) returned 1 [0054.725] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x5834b0 [0054.725] GetLastError () returned 0x12 [0054.725] SetLastError (dwErrCode=0x12) [0054.725] GetLastError () returned 0x12 [0054.725] SetLastError (dwErrCode=0x12) [0054.725] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57b428 [0054.725] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0054.725] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0054.725] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f18 | out: hHeap=0x570000) returned 1 [0054.725] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590d10 | out: hHeap=0x570000) returned 1 [0054.725] GetLastError () returned 0x12 [0054.725] SetLastError (dwErrCode=0x12) [0054.725] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589d28 [0054.725] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589ea8 [0054.725] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589eb8 [0054.725] GetLastError () returned 0x12 [0054.725] SetLastError (dwErrCode=0x12) [0054.725] GetLastError () returned 0x12 [0054.726] SetLastError (dwErrCode=0x12) [0054.726] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e0f0 [0054.726] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0054.726] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0054.726] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d28 | out: hHeap=0x570000) returned 1 [0054.726] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0054.726] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589eb8 | out: hHeap=0x570000) returned 1 [0054.726] GetLastError () returned 0x12 [0054.726] SetLastError (dwErrCode=0x12) [0054.726] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589d48 [0054.726] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589e58 [0054.726] GetLastError () returned 0x12 [0054.726] SetLastError (dwErrCode=0x12) [0054.726] GetLastError () returned 0x12 [0054.726] SetLastError (dwErrCode=0x12) [0054.726] GetLastError () returned 0x12 [0054.726] SetLastError (dwErrCode=0x12) [0054.726] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589e98 [0054.726] GetLastError () returned 0x12 [0054.726] SetLastError (dwErrCode=0x12) [0054.726] GetLastError () returned 0x12 [0054.726] SetLastError (dwErrCode=0x12) [0054.726] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e1b0 [0054.726] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0054.726] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0054.726] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d48 | out: hHeap=0x570000) returned 1 [0054.726] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0054.726] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e98 | out: hHeap=0x570000) returned 1 [0054.726] GetLastError () returned 0x12 [0054.726] SetLastError (dwErrCode=0x12) [0054.727] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589e28 [0054.727] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e58 | out: hHeap=0x570000) returned 1 [0054.727] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ea8 | out: hHeap=0x570000) returned 1 [0054.727] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58e0c0 [0054.727] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589d68 [0054.727] GetLastError () returned 0x12 [0054.727] SetLastError (dwErrCode=0x12) [0054.727] GetLastError () returned 0x12 [0054.727] SetLastError (dwErrCode=0x12) [0054.727] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e0f0 [0054.727] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0054.727] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0054.727] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e28 | out: hHeap=0x570000) returned 1 [0054.727] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e1b0 | out: hHeap=0x570000) returned 1 [0054.727] GetLastError () returned 0x12 [0054.727] SetLastError (dwErrCode=0x12) [0054.727] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589ec8 [0054.727] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589d78 [0054.727] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589e38 [0054.727] GetLastError () returned 0x12 [0054.727] SetLastError (dwErrCode=0x12) [0054.727] GetLastError () returned 0x12 [0054.727] SetLastError (dwErrCode=0x12) [0054.727] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e1b0 [0054.727] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0054.727] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0054.727] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ec8 | out: hHeap=0x570000) returned 1 [0054.727] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0054.728] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e38 | out: hHeap=0x570000) returned 1 [0054.728] GetLastError () returned 0x12 [0054.728] SetLastError (dwErrCode=0x12) [0054.728] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589d58 [0054.728] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589d88 [0054.728] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581690 [0054.728] GetLastError () returned 0x12 [0054.728] SetLastError (dwErrCode=0x12) [0054.728] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58ba78 [0054.728] GetLastError () returned 0x12 [0054.728] SetLastError (dwErrCode=0x12) [0054.728] GetLastError () returned 0x12 [0054.728] SetLastError (dwErrCode=0x12) [0054.728] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xa0) returned 0x58bc80 [0054.728] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589de8 [0054.728] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589eb8 [0054.728] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581650 [0054.728] GetLastError () returned 0x12 [0054.728] SetLastError (dwErrCode=0x12) [0054.728] GetLastError () returned 0x12 [0054.728] SetLastError (dwErrCode=0x12) [0054.728] GetLastError () returned 0x12 [0054.728] SetLastError (dwErrCode=0x12) [0054.728] GetLastError () returned 0x12 [0054.728] SetLastError (dwErrCode=0x12) [0054.728] GetLastError () returned 0x12 [0054.728] SetLastError (dwErrCode=0x12) [0054.728] GetLastError () returned 0x12 [0054.728] SetLastError (dwErrCode=0x12) [0054.728] GetLastError () returned 0x12 [0054.728] SetLastError (dwErrCode=0x12) [0054.728] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589ec8 [0054.728] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x6) returned 0x589d98 [0054.729] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x5) returned 0x589e38 [0054.729] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d38 [0054.729] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x5794d8 [0054.729] GetLastError () returned 0x12 [0054.729] SetLastError (dwErrCode=0x12) [0054.729] GetLastError () returned 0x12 [0054.729] SetLastError (dwErrCode=0x12) [0054.729] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589ed8 [0054.729] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d48 [0054.729] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589dd8 [0054.729] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589808 [0054.729] GetLastError () returned 0x12 [0054.729] SetLastError (dwErrCode=0x12) [0054.729] GetLastError () returned 0x12 [0054.729] SetLastError (dwErrCode=0x12) [0054.729] GetLastError () returned 0x12 [0054.729] SetLastError (dwErrCode=0x12) [0054.729] GetLastError () returned 0x12 [0054.729] SetLastError (dwErrCode=0x12) [0054.729] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f08 [0054.729] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e98 [0054.729] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589da8 [0054.729] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589e68 [0054.729] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589bc8 [0054.729] GetLastError () returned 0x12 [0054.729] SetLastError (dwErrCode=0x12) [0054.729] GetLastError () returned 0x12 [0054.729] SetLastError (dwErrCode=0x12) [0054.730] GetLastError () returned 0x12 [0054.730] SetLastError (dwErrCode=0x12) [0054.730] GetLastError () returned 0x12 [0054.730] SetLastError (dwErrCode=0x12) [0054.730] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589d28 [0054.730] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589db8 [0054.730] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e78 [0054.730] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589df8 [0054.730] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c3c8 [0054.730] GetLastError () returned 0x12 [0054.730] SetLastError (dwErrCode=0x12) [0054.730] GetLastError () returned 0x12 [0054.730] SetLastError (dwErrCode=0x12) [0054.730] GetLastError () returned 0x12 [0054.730] SetLastError (dwErrCode=0x12) [0054.730] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x5895c8 [0054.730] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589c28 [0054.730] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5895c8 | out: hHeap=0x570000) returned 1 [0054.730] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x56) returned 0x589868 [0054.730] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x579f68 [0054.730] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x58e0f0 [0054.730] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579f68 | out: hHeap=0x570000) returned 1 [0054.730] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x87) returned 0x579f68 [0054.730] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xd) returned 0x579430 [0054.730] GetLastError () returned 0x12 [0054.730] SetLastError (dwErrCode=0x12) [0054.730] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda68, cchData=2 | out: lpLCData="0") returned 2 [0054.730] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x579538 [0054.730] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x58f290 [0054.730] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c2d8 [0054.730] GetLastError () returned 0x12 [0054.730] SetLastError (dwErrCode=0x12) [0054.731] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58f720 [0054.731] GetLastError () returned 0x12 [0054.731] SetLastError (dwErrCode=0x12) [0054.731] GetLastError () returned 0x12 [0054.731] SetLastError (dwErrCode=0x12) [0054.731] GetLastError () returned 0x12 [0054.731] SetLastError (dwErrCode=0x12) [0054.731] GetLastError () returned 0x12 [0054.731] SetLastError (dwErrCode=0x12) [0054.731] GetLastError () returned 0x12 [0054.731] SetLastError (dwErrCode=0x12) [0054.731] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e08 [0054.731] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589ee8 [0054.731] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581350 [0054.731] GetLastError () returned 0x12 [0054.731] SetLastError (dwErrCode=0x12) [0054.731] GetLastError () returned 0x12 [0054.731] SetLastError (dwErrCode=0x12) [0054.731] GetLastError () returned 0x12 [0054.731] SetLastError (dwErrCode=0x12) [0054.731] GetLastError () returned 0x12 [0054.731] SetLastError (dwErrCode=0x12) [0054.731] GetLastError () returned 0x12 [0054.731] SetLastError (dwErrCode=0x12) [0054.731] GetLastError () returned 0x12 [0054.731] SetLastError (dwErrCode=0x12) [0054.731] GetLastError () returned 0x12 [0054.731] SetLastError (dwErrCode=0x12) [0054.731] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e58 [0054.731] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x579448 [0054.731] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x57b8b8 [0054.731] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x57bc18 [0054.732] GetLastError () returned 0x12 [0054.732] SetLastError (dwErrCode=0x12) [0054.732] GetLastError () returned 0x12 [0054.732] SetLastError (dwErrCode=0x12) [0054.732] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e48 [0054.732] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e18 [0054.732] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e88 [0054.732] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589b68 [0054.732] GetLastError () returned 0x12 [0054.732] SetLastError (dwErrCode=0x12) [0054.732] GetLastError () returned 0x12 [0054.732] SetLastError (dwErrCode=0x12) [0054.732] GetLastError () returned 0x12 [0054.732] SetLastError (dwErrCode=0x12) [0054.732] GetLastError () returned 0x12 [0054.732] SetLastError (dwErrCode=0x12) [0054.732] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589dc8 [0054.732] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589e28 [0054.732] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d18 [0054.732] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589ea8 [0054.732] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589568 [0054.732] GetLastError () returned 0x12 [0054.732] SetLastError (dwErrCode=0x12) [0054.732] GetLastError () returned 0x12 [0054.732] SetLastError (dwErrCode=0x12) [0054.732] GetLastError () returned 0x12 [0054.732] SetLastError (dwErrCode=0x12) [0054.732] GetLastError () returned 0x12 [0054.732] SetLastError (dwErrCode=0x12) [0054.732] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589ef8 [0054.732] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a028 [0054.733] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a038 [0054.733] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589f18 [0054.733] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c1e8 [0054.733] GetLastError () returned 0x12 [0054.733] SetLastError (dwErrCode=0x12) [0054.733] GetLastError () returned 0x12 [0054.733] SetLastError (dwErrCode=0x12) [0054.733] GetLastError () returned 0x12 [0054.733] SetLastError (dwErrCode=0x12) [0054.733] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x57b428 [0054.733] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x58f928 [0054.733] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0054.733] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xac) returned 0x57b428 [0054.733] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10e) returned 0x58f9e0 [0054.733] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10e) returned 0x58faf8 [0054.733] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f9e0 | out: hHeap=0x570000) returned 1 [0054.733] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10e) returned 0x58f9e0 [0054.733] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x58db70 [0054.733] GetLastError () returned 0x12 [0054.733] SetLastError (dwErrCode=0x12) [0054.733] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda54, cchData=2 | out: lpLCData="0") returned 2 [0054.733] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58fe98 [0054.733] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x590018 [0054.733] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x583630 [0054.733] GetLastError () returned 0x12 [0054.733] SetLastError (dwErrCode=0x12) [0054.733] GetLastError () returned 0x12 [0054.733] SetLastError (dwErrCode=0x12) [0054.733] GetLastError () returned 0x12 [0054.733] SetLastError (dwErrCode=0x12) [0054.733] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c058 [0054.733] GetLastError () returned 0x12 [0054.734] SetLastError (dwErrCode=0x12) [0054.734] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x5904a8 [0054.734] GetLastError () returned 0x12 [0054.734] SetLastError (dwErrCode=0x12) [0054.734] GetLastError () returned 0x12 [0054.734] SetLastError (dwErrCode=0x12) [0054.734] GetLastError () returned 0x12 [0054.734] SetLastError (dwErrCode=0x12) [0054.734] GetLastError () returned 0x12 [0054.734] SetLastError (dwErrCode=0x12) [0054.734] GetLastError () returned 0x12 [0054.734] SetLastError (dwErrCode=0x12) [0054.734] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589fb8 [0054.734] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f38 [0054.734] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5813d0 [0054.734] GetLastError () returned 0x12 [0054.734] SetLastError (dwErrCode=0x12) [0054.734] GetLastError () returned 0x12 [0054.734] SetLastError (dwErrCode=0x12) [0054.734] GetLastError () returned 0x12 [0054.734] SetLastError (dwErrCode=0x12) [0054.734] GetLastError () returned 0x12 [0054.734] SetLastError (dwErrCode=0x12) [0054.734] GetLastError () returned 0x12 [0054.734] SetLastError (dwErrCode=0x12) [0054.734] GetLastError () returned 0x12 [0054.734] SetLastError (dwErrCode=0x12) [0054.734] GetLastError () returned 0x12 [0054.734] SetLastError (dwErrCode=0x12) [0054.734] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f98 [0054.734] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x58fcd0 [0054.734] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x58fce8 [0054.735] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x58fee0 [0054.735] GetLastError () returned 0x12 [0054.735] SetLastError (dwErrCode=0x12) [0054.735] GetLastError () returned 0x12 [0054.735] SetLastError (dwErrCode=0x12) [0054.735] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589ff8 [0054.735] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a098 [0054.735] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f78 [0054.735] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x5898c8 [0054.735] GetLastError () returned 0x12 [0054.735] SetLastError (dwErrCode=0x12) [0054.735] GetLastError () returned 0x12 [0054.735] SetLastError (dwErrCode=0x12) [0054.735] GetLastError () returned 0x12 [0054.735] SetLastError (dwErrCode=0x12) [0054.735] GetLastError () returned 0x12 [0054.735] SetLastError (dwErrCode=0x12) [0054.735] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589fa8 [0054.735] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a0b8 [0054.735] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a0a8 [0054.735] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x58a0c8 [0054.735] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x5897a8 [0054.735] GetLastError () returned 0x12 [0054.735] SetLastError (dwErrCode=0x12) [0054.735] GetLastError () returned 0x12 [0054.735] SetLastError (dwErrCode=0x12) [0054.735] GetLastError () returned 0x12 [0054.735] SetLastError (dwErrCode=0x12) [0054.735] GetLastError () returned 0x12 [0054.736] SetLastError (dwErrCode=0x12) [0054.736] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f68 [0054.736] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589fc8 [0054.736] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a068 [0054.736] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x58a018 [0054.736] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c558 [0054.736] GetLastError () returned 0x12 [0054.736] SetLastError (dwErrCode=0x12) [0054.736] GetLastError () returned 0x12 [0054.736] SetLastError (dwErrCode=0x12) [0054.736] GetLastError () returned 0x12 [0054.736] SetLastError (dwErrCode=0x12) [0054.736] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x5895c8 [0054.736] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589c28 | out: hHeap=0x570000) returned 1 [0054.736] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x5899e8 [0054.736] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5895c8 | out: hHeap=0x570000) returned 1 [0054.736] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xac) returned 0x5906b0 [0054.736] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x590768 [0054.736] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0054.736] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x58e0f0 [0054.736] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590768 | out: hHeap=0x570000) returned 1 [0054.736] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10e) returned 0x590768 [0054.736] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x58daa8 [0054.736] GetLastError () returned 0x12 [0054.736] SetLastError (dwErrCode=0x12) [0054.736] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda44, cchData=2 | out: lpLCData="0") returned 2 [0054.736] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58fd00 [0054.736] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x590880 [0054.736] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x5834f0 [0054.736] GetLastError () returned 0x12 [0054.737] SetLastError (dwErrCode=0x12) [0054.737] GetLastError () returned 0x12 [0054.737] SetLastError (dwErrCode=0x12) [0054.737] GetLastError () returned 0x12 [0054.737] SetLastError (dwErrCode=0x12) [0054.737] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d68 | out: hHeap=0x570000) returned 1 [0054.737] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589d68 [0054.737] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589f58 [0054.737] GetLastError () returned 0x12 [0054.737] SetLastError (dwErrCode=0x12) [0054.737] GetLastError () returned 0x12 [0054.737] SetLastError (dwErrCode=0x12) [0054.737] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x590d10 [0054.737] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x590dd0 [0054.737] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590dd0 | out: hHeap=0x570000) returned 1 [0054.737] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d58 | out: hHeap=0x570000) returned 1 [0054.737] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e1b0 | out: hHeap=0x570000) returned 1 [0054.737] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f58 | out: hHeap=0x570000) returned 1 [0054.737] GetLastError () returned 0x12 [0054.737] SetLastError (dwErrCode=0x12) [0054.737] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589fd8 [0054.737] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d88 | out: hHeap=0x570000) returned 1 [0054.737] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d78 | out: hHeap=0x570000) returned 1 [0054.737] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58faf8 | out: hHeap=0x570000) returned 1 [0054.737] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f928 | out: hHeap=0x570000) returned 1 [0054.737] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0054.737] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5899e8 | out: hHeap=0x570000) returned 1 [0054.738] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x583630 | out: hHeap=0x570000) returned 1 [0054.738] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d68 | out: hHeap=0x570000) returned 1 [0054.738] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589d58 [0054.738] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58ddf0 [0054.738] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58dad0 [0054.738] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ddf0 | out: hHeap=0x570000) returned 1 [0054.738] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5834f0 | out: hHeap=0x570000) returned 1 [0054.738] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590880 | out: hHeap=0x570000) returned 1 [0054.738] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fd00 | out: hHeap=0x570000) returned 1 [0054.738] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5906b0 | out: hHeap=0x570000) returned 1 [0054.738] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590768 | out: hHeap=0x570000) returned 1 [0054.738] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58daa8 | out: hHeap=0x570000) returned 1 [0054.738] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c558 | out: hHeap=0x570000) returned 1 [0054.738] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f68 | out: hHeap=0x570000) returned 1 [0054.738] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fc8 | out: hHeap=0x570000) returned 1 [0054.738] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a068 | out: hHeap=0x570000) returned 1 [0054.738] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a018 | out: hHeap=0x570000) returned 1 [0054.738] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5897a8 | out: hHeap=0x570000) returned 1 [0054.738] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fa8 | out: hHeap=0x570000) returned 1 [0054.738] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0b8 | out: hHeap=0x570000) returned 1 [0054.738] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0a8 | out: hHeap=0x570000) returned 1 [0054.738] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0c8 | out: hHeap=0x570000) returned 1 [0054.738] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5898c8 | out: hHeap=0x570000) returned 1 [0054.738] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f78 | out: hHeap=0x570000) returned 1 [0054.738] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a098 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ff8 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fee0 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f98 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fcd0 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fce8 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5813d0 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f38 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fb8 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5904a8 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c058 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5834b0 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590018 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fe98 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f9e0 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58db70 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c1e8 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ef8 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a028 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a038 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f18 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589568 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589dc8 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e28 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d18 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ea8 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589b68 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e88 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e18 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e48 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bc18 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e58 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579448 | out: hHeap=0x570000) returned 1 [0054.739] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b8b8 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581350 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ee8 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e08 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f720 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c2d8 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579538 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589868 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579f68 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579430 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c3c8 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d28 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589db8 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e78 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589df8 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589bc8 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f08 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e98 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589da8 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e68 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589808 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589dd8 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d48 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ed8 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5794d8 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d38 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ec8 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d98 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e38 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581650 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589eb8 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589de8 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ba78 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581690 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58bc80 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d58 | out: hHeap=0x570000) returned 1 [0054.740] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0c0 | out: hHeap=0x570000) returned 1 [0054.740] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5815d0 [0054.741] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58dad0 | out: hHeap=0x570000) returned 1 [0054.741] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x218 [0054.776] Process32FirstW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0054.776] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0054.777] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0054.778] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0054.779] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0054.780] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0054.780] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0054.781] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0054.782] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0054.783] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.784] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0054.785] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0054.789] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.789] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0054.790] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x59, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.791] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.792] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.793] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.794] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.795] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.796] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.797] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.797] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.798] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.799] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0054.800] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.801] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0054.802] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0054.803] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.803] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0054.804] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0054.805] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0054.806] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0054.807] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0054.808] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0054.808] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0054.809] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0054.810] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0054.811] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending-windsor.exe")) returned 1 [0054.812] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="workers_offline_scripts.exe")) returned 1 [0054.813] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sharesamerican.exe")) returned 1 [0054.814] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x764, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="clara-cancer-holder.exe")) returned 1 [0054.814] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="authoracrossci.exe")) returned 1 [0054.815] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="critics_herbal_amplifier.exe")) returned 1 [0054.816] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hugestdlook.exe")) returned 1 [0054.833] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="terraceregistered.exe")) returned 1 [0054.834] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x514, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="poly_actually.exe")) returned 1 [0054.835] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="inn.exe")) returned 1 [0054.836] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fluidheating.exe")) returned 1 [0054.837] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0054.838] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="qualifications.exe")) returned 1 [0054.839] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="lauderdale transmitted washer.exe")) returned 1 [0054.839] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane.exe")) returned 1 [0054.840] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="saving.exe")) returned 1 [0054.841] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd40, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fred_j_species.exe")) returned 1 [0054.842] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="poster.exe")) returned 1 [0054.843] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept cheaper.exe")) returned 1 [0054.844] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="shooting.exe")) returned 1 [0054.844] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="protection.exe")) returned 1 [0054.845] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0054.846] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0054.847] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0054.849] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0054.850] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0054.851] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0054.852] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0054.853] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0054.854] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0054.855] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0054.856] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0054.857] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0054.858] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0054.860] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0054.860] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0054.861] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0054.862] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0054.863] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0054.864] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0054.865] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0054.866] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0054.867] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0054.870] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0054.871] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0054.872] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0054.873] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0054.873] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0054.874] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0054.875] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0054.876] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0054.877] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0054.878] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0054.879] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0054.879] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0054.880] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0054.881] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0054.882] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0054.883] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0054.884] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0054.884] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0054.885] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0054.886] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0054.887] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0054.888] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bra acoustic sink.exe")) returned 1 [0054.889] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="langaprsubmit.exe")) returned 1 [0054.890] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1110, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0054.890] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0054.891] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0054.892] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0054.893] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0054.894] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0054.895] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0054.895] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x126c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.896] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11fc, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0054.897] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11e4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0054.898] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1170, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0054.899] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1170, pcPriClassBase=8, dwFlags=0x0, szExeFile="vinfk.exe")) returned 1 [0054.900] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.901] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0054.901] CloseHandle (hObject=0x218) returned 1 [0054.902] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58df08 | out: hHeap=0x570000) returned 1 [0054.902] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58e0c0 [0054.902] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58df08 [0054.902] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58df08 | out: hHeap=0x570000) returned 1 [0054.902] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x5834b0 [0054.902] GetLastError () returned 0x12 [0054.902] SetLastError (dwErrCode=0x12) [0054.902] GetLastError () returned 0x12 [0054.902] SetLastError (dwErrCode=0x12) [0054.902] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57b428 [0054.902] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0054.902] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0054.902] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fd8 | out: hHeap=0x570000) returned 1 [0054.902] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590d10 | out: hHeap=0x570000) returned 1 [0054.902] GetLastError () returned 0x12 [0054.902] SetLastError (dwErrCode=0x12) [0054.902] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589fa8 [0054.902] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589fb8 [0054.902] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x58a098 [0054.902] GetLastError () returned 0x12 [0054.902] SetLastError (dwErrCode=0x12) [0054.902] GetLastError () returned 0x12 [0054.902] SetLastError (dwErrCode=0x12) [0054.902] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e0f0 [0054.902] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0054.902] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0054.903] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fa8 | out: hHeap=0x570000) returned 1 [0054.903] SetLastError (dwErrCode=0x12) [0054.903] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x58a0b8 [0054.903] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x58a068 [0054.903] GetLastError () returned 0x12 [0054.903] SetLastError (dwErrCode=0x12) [0054.903] GetLastError () returned 0x12 [0054.903] SetLastError (dwErrCode=0x12) [0054.903] GetLastError () returned 0x12 [0054.903] SetLastError (dwErrCode=0x12) [0054.903] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589f38 [0054.903] GetLastError () returned 0x12 [0054.903] SetLastError (dwErrCode=0x12) [0054.903] GetLastError () returned 0x12 [0054.903] SetLastError (dwErrCode=0x12) [0054.903] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e1b0 [0054.903] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0054.903] SetLastError (dwErrCode=0x12) [0054.903] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589fa8 [0054.903] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58df08 [0054.903] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589fd8 [0054.903] GetLastError () returned 0x12 [0054.903] SetLastError (dwErrCode=0x12) [0054.903] GetLastError () returned 0x12 [0054.903] SetLastError (dwErrCode=0x12) [0054.903] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e0f0 [0054.904] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0054.904] GetLastError () returned 0x12 [0054.904] SetLastError (dwErrCode=0x12) [0054.904] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589fb8 [0054.904] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589f78 [0054.904] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x58a078 [0054.904] GetLastError () returned 0x12 [0054.904] SetLastError (dwErrCode=0x12) [0054.904] GetLastError () returned 0x12 [0054.904] SetLastError (dwErrCode=0x12) [0054.904] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e1b0 [0054.904] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0054.904] SetLastError (dwErrCode=0x12) [0054.904] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589f58 [0054.904] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x58a098 [0054.904] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5815b0 [0054.904] GetLastError () returned 0x12 [0054.904] SetLastError (dwErrCode=0x12) [0054.904] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58ba78 [0054.904] GetLastError () returned 0x12 [0054.904] SetLastError (dwErrCode=0x12) [0054.904] GetLastError () returned 0x12 [0054.904] SetLastError (dwErrCode=0x12) [0054.904] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xa0) returned 0x58bc80 [0054.904] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a078 [0054.904] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a0b8 [0054.904] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581690 [0054.905] GetLastError () returned 0x12 [0054.905] SetLastError (dwErrCode=0x12) [0054.905] GetLastError () returned 0x12 [0054.905] SetLastError (dwErrCode=0x12) [0054.905] GetLastError () returned 0x12 [0054.905] SetLastError (dwErrCode=0x12) [0054.905] GetLastError () returned 0x12 [0054.905] SetLastError (dwErrCode=0x12) [0054.905] GetLastError () returned 0x12 [0054.905] SetLastError (dwErrCode=0x12) [0054.905] GetLastError () returned 0x12 [0054.905] SetLastError (dwErrCode=0x12) [0054.905] GetLastError () returned 0x12 [0054.905] SetLastError (dwErrCode=0x12) [0054.905] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f38 [0054.905] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x6) returned 0x58a028 [0054.905] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x5) returned 0x589f88 [0054.905] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a0a8 [0054.905] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x579430 [0054.905] GetLastError () returned 0x12 [0054.905] SetLastError (dwErrCode=0x12) [0054.905] GetLastError () returned 0x12 [0054.905] SetLastError (dwErrCode=0x12) [0054.905] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589fa8 [0054.905] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a058 [0054.905] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a0c8 [0054.905] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589568 [0054.905] GetLastError () returned 0x12 [0054.905] SetLastError (dwErrCode=0x12) [0054.905] GetLastError () returned 0x12 [0054.906] SetLastError (dwErrCode=0x12) [0054.906] GetLastError () returned 0x12 [0054.906] SetLastError (dwErrCode=0x12) [0054.906] GetLastError () returned 0x12 [0054.906] SetLastError (dwErrCode=0x12) [0054.906] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f68 [0054.906] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f98 [0054.906] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589fb8 [0054.906] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a0d8 [0054.906] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x5898c8 [0054.906] GetLastError () returned 0x12 [0054.906] SetLastError (dwErrCode=0x12) [0054.906] GetLastError () returned 0x12 [0054.906] SetLastError (dwErrCode=0x12) [0054.906] GetLastError () returned 0x12 [0054.906] SetLastError (dwErrCode=0x12) [0054.906] GetLastError () returned 0x12 [0054.906] SetLastError (dwErrCode=0x12) [0054.906] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f18 [0054.906] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a068 [0054.906] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a018 [0054.906] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589f28 [0054.906] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c558 [0054.906] GetLastError () returned 0x12 [0054.906] SetLastError (dwErrCode=0x12) [0054.906] GetLastError () returned 0x12 [0054.906] SetLastError (dwErrCode=0x12) [0054.906] GetLastError () returned 0x12 [0054.906] SetLastError (dwErrCode=0x12) [0054.906] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589988 [0054.906] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x5899e8 [0054.906] SetLastError (dwErrCode=0x12) [0054.906] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda68, cchData=2 | out: lpLCData="0") returned 2 [0054.907] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x5794d8 [0054.907] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x58f290 [0054.907] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c008 [0054.907] GetLastError () returned 0x12 [0054.907] SetLastError (dwErrCode=0x12) [0054.907] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58f720 [0054.907] GetLastError () returned 0x12 [0054.907] SetLastError (dwErrCode=0x12) [0054.907] GetLastError () returned 0x12 [0054.907] SetLastError (dwErrCode=0x12) [0054.907] GetLastError () returned 0x12 [0054.907] SetLastError (dwErrCode=0x12) [0054.907] GetLastError () returned 0x12 [0054.907] SetLastError (dwErrCode=0x12) [0054.907] GetLastError () returned 0x12 [0054.907] SetLastError (dwErrCode=0x12) [0054.907] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f48 [0054.907] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589fc8 [0054.907] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581350 [0054.907] GetLastError () returned 0x12 [0054.907] SetLastError (dwErrCode=0x12) [0054.907] GetLastError () returned 0x12 [0054.907] SetLastError (dwErrCode=0x12) [0054.907] GetLastError () returned 0x12 [0054.907] SetLastError (dwErrCode=0x12) [0054.907] GetLastError () returned 0x12 [0054.907] SetLastError (dwErrCode=0x12) [0054.907] GetLastError () returned 0x12 [0054.907] SetLastError (dwErrCode=0x12) [0054.907] GetLastError () returned 0x12 [0054.907] SetLastError (dwErrCode=0x12) [0054.908] GetLastError () returned 0x12 [0054.908] SetLastError (dwErrCode=0x12) [0054.908] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589fe8 [0054.908] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x579538 [0054.908] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x57b8b8 [0054.908] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x57bc18 [0054.908] GetLastError () returned 0x12 [0054.908] SetLastError (dwErrCode=0x12) [0054.908] GetLastError () returned 0x12 [0054.908] SetLastError (dwErrCode=0x12) [0054.908] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a008 [0054.908] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589ff8 [0054.908] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a038 [0054.908] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589928 [0054.908] GetLastError () returned 0x12 [0054.908] SetLastError (dwErrCode=0x12) [0054.908] GetLastError () returned 0x12 [0054.908] SetLastError (dwErrCode=0x12) [0054.908] GetLastError () returned 0x12 [0054.908] SetLastError (dwErrCode=0x12) [0054.908] GetLastError () returned 0x12 [0054.908] SetLastError (dwErrCode=0x12) [0054.908] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a088 [0054.908] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a048 [0054.908] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589e58 [0054.908] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589eb8 [0054.908] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589a48 [0054.908] GetLastError () returned 0x12 [0054.908] SetLastError (dwErrCode=0x12) [0054.908] GetLastError () returned 0x12 [0054.909] SetLastError (dwErrCode=0x12) [0054.909] GetLastError () returned 0x12 [0054.909] SetLastError (dwErrCode=0x12) [0054.909] GetLastError () returned 0x12 [0054.909] SetLastError (dwErrCode=0x12) [0054.909] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e88 [0054.909] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589db8 [0054.909] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589e48 [0054.909] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589d88 [0054.909] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c0a8 [0054.909] GetLastError () returned 0x12 [0054.909] SetLastError (dwErrCode=0x12) [0054.909] GetLastError () returned 0x12 [0054.909] SetLastError (dwErrCode=0x12) [0054.909] GetLastError () returned 0x12 [0054.909] SetLastError (dwErrCode=0x12) [0054.909] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x57b428 [0054.909] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x58f928 [0054.909] SetLastError (dwErrCode=0x12) [0054.909] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda54, cchData=2 | out: lpLCData="0") returned 2 [0054.909] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58ff58 [0054.909] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x590018 [0054.909] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x5834f0 [0054.909] GetLastError () returned 0x12 [0054.909] SetLastError (dwErrCode=0x12) [0054.909] GetLastError () returned 0x12 [0054.909] SetLastError (dwErrCode=0x12) [0054.909] GetLastError () returned 0x12 [0054.909] SetLastError (dwErrCode=0x12) [0054.909] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c5a8 [0054.909] GetLastError () returned 0x12 [0054.910] SetLastError (dwErrCode=0x12) [0054.910] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x5904a8 [0054.910] GetLastError () returned 0x12 [0054.910] SetLastError (dwErrCode=0x12) [0054.910] GetLastError () returned 0x12 [0054.910] SetLastError (dwErrCode=0x12) [0054.910] GetLastError () returned 0x12 [0054.910] SetLastError (dwErrCode=0x12) [0054.910] GetLastError () returned 0x12 [0054.910] SetLastError (dwErrCode=0x12) [0054.910] GetLastError () returned 0x12 [0054.910] SetLastError (dwErrCode=0x12) [0054.910] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d18 [0054.910] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d48 [0054.910] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5813d0 [0054.910] GetLastError () returned 0x12 [0054.910] SetLastError (dwErrCode=0x12) [0054.910] GetLastError () returned 0x12 [0054.910] SetLastError (dwErrCode=0x12) [0054.910] GetLastError () returned 0x12 [0054.910] SetLastError (dwErrCode=0x12) [0054.910] GetLastError () returned 0x12 [0054.910] SetLastError (dwErrCode=0x12) [0054.910] GetLastError () returned 0x12 [0054.910] SetLastError (dwErrCode=0x12) [0054.910] GetLastError () returned 0x12 [0054.910] SetLastError (dwErrCode=0x12) [0054.910] GetLastError () returned 0x12 [0054.910] SetLastError (dwErrCode=0x12) [0054.910] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e98 [0054.910] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x58ff40 [0054.910] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x58ffe8 [0054.910] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x58ffd0 [0054.911] GetLastError () returned 0x12 [0054.911] SetLastError (dwErrCode=0x12) [0054.911] GetLastError () returned 0x12 [0054.911] SetLastError (dwErrCode=0x12) [0054.911] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d58 [0054.911] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e08 [0054.911] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589dc8 [0054.911] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589aa8 [0054.911] GetLastError () returned 0x12 [0054.911] SetLastError (dwErrCode=0x12) [0054.911] GetLastError () returned 0x12 [0054.911] SetLastError (dwErrCode=0x12) [0054.911] GetLastError () returned 0x12 [0054.911] SetLastError (dwErrCode=0x12) [0054.911] GetLastError () returned 0x12 [0054.911] SetLastError (dwErrCode=0x12) [0054.911] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589d68 [0054.911] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589ea8 [0054.911] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589ed8 [0054.911] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589d78 [0054.911] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x5895c8 [0054.911] GetLastError () returned 0x12 [0054.911] SetLastError (dwErrCode=0x12) [0054.911] GetLastError () returned 0x12 [0054.911] SetLastError (dwErrCode=0x12) [0054.911] GetLastError () returned 0x12 [0054.911] SetLastError (dwErrCode=0x12) [0054.911] GetLastError () returned 0x12 [0054.911] SetLastError (dwErrCode=0x12) [0054.911] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589ec8 [0054.911] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589e78 [0054.912] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d98 [0054.912] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589e68 [0054.912] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c418 [0054.912] GetLastError () returned 0x12 [0054.912] SetLastError (dwErrCode=0x12) [0054.912] GetLastError () returned 0x12 [0054.912] SetLastError (dwErrCode=0x12) [0054.912] GetLastError () returned 0x12 [0054.912] SetLastError (dwErrCode=0x12) [0054.912] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589b08 [0054.912] SetLastError (dwErrCode=0x12) [0054.912] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda44, cchData=2 | out: lpLCData="0") returned 2 [0054.912] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58ff70 [0054.912] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x590880 [0054.912] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x583670 [0054.912] GetLastError () returned 0x12 [0054.912] SetLastError (dwErrCode=0x12) [0054.912] GetLastError () returned 0x12 [0054.912] SetLastError (dwErrCode=0x12) [0054.912] GetLastError () returned 0x12 [0054.912] SetLastError (dwErrCode=0x12) [0054.912] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589f08 [0054.912] GetLastError () returned 0x12 [0054.912] SetLastError (dwErrCode=0x12) [0054.912] GetLastError () returned 0x12 [0054.912] SetLastError (dwErrCode=0x12) [0054.912] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x590d10 [0054.912] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x590dd0 [0054.913] SetLastError (dwErrCode=0x12) [0054.913] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589da8 [0054.913] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x210 [0054.927] Process32FirstW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0054.927] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0054.928] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0054.929] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0054.930] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0054.931] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0054.932] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0054.933] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0054.934] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0054.934] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.935] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0054.936] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0054.937] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.938] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0054.939] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.940] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.940] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.941] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.942] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.943] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.944] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.945] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.945] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.946] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.947] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0054.948] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.949] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0054.950] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0054.950] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.951] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0054.952] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0054.953] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0054.954] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0054.955] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0054.955] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0054.956] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0054.957] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0054.958] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0054.959] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending-windsor.exe")) returned 1 [0054.968] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="workers_offline_scripts.exe")) returned 1 [0054.969] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sharesamerican.exe")) returned 1 [0054.969] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x764, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="clara-cancer-holder.exe")) returned 1 [0054.970] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="authoracrossci.exe")) returned 1 [0054.971] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="critics_herbal_amplifier.exe")) returned 1 [0054.972] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hugestdlook.exe")) returned 1 [0054.973] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="terraceregistered.exe")) returned 1 [0054.974] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x514, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="poly_actually.exe")) returned 1 [0054.974] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="inn.exe")) returned 1 [0054.975] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fluidheating.exe")) returned 1 [0054.976] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0054.977] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="qualifications.exe")) returned 1 [0054.978] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="lauderdale transmitted washer.exe")) returned 1 [0054.979] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane.exe")) returned 1 [0054.980] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="saving.exe")) returned 1 [0054.980] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd40, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fred_j_species.exe")) returned 1 [0054.981] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="poster.exe")) returned 1 [0054.982] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept cheaper.exe")) returned 1 [0054.983] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="shooting.exe")) returned 1 [0054.984] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="protection.exe")) returned 1 [0054.985] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0054.985] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0054.986] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0054.987] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0054.988] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0054.989] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0054.989] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0054.990] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0054.991] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0054.992] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0054.993] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0054.994] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0054.995] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0054.996] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0054.996] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0054.997] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0054.998] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0054.999] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0055.000] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0055.001] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0055.002] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0055.002] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0055.003] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0055.004] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0055.005] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0055.009] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0055.010] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0055.011] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0055.012] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0055.013] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0055.014] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0055.014] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0055.015] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0055.016] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0055.017] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0055.018] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0055.019] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0055.019] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0055.020] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0055.021] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0055.022] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0055.023] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0055.024] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0055.024] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bra acoustic sink.exe")) returned 1 [0055.025] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="langaprsubmit.exe")) returned 1 [0055.026] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1110, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0055.027] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0055.028] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0055.029] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0055.030] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0055.030] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0055.031] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0055.032] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x126c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.033] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11fc, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0055.034] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11e4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0055.035] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1170, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0055.035] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1170, pcPriClassBase=8, dwFlags=0x0, szExeFile="vinfk.exe")) returned 1 [0055.036] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.037] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0055.038] CloseHandle (hObject=0x210) returned 1 [0055.038] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0c0 | out: hHeap=0x570000) returned 1 [0055.038] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58e0c0 [0055.038] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58df08 [0055.038] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58df08 | out: hHeap=0x570000) returned 1 [0055.038] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x583630 [0055.038] GetLastError () returned 0x12 [0055.038] SetLastError (dwErrCode=0x12) [0055.038] GetLastError () returned 0x12 [0055.038] SetLastError (dwErrCode=0x12) [0055.038] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57b428 [0055.038] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0055.038] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0055.038] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589da8 | out: hHeap=0x570000) returned 1 [0055.038] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590d10 | out: hHeap=0x570000) returned 1 [0055.038] GetLastError () returned 0x12 [0055.038] SetLastError (dwErrCode=0x12) [0055.038] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589ef8 [0055.038] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589e18 [0055.038] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589da8 [0055.038] GetLastError () returned 0x12 [0055.038] SetLastError (dwErrCode=0x12) [0055.038] GetLastError () returned 0x12 [0055.038] SetLastError (dwErrCode=0x12) [0055.038] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e0f0 [0055.039] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0055.039] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0055.039] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ef8 | out: hHeap=0x570000) returned 1 [0055.039] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0055.039] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589da8 | out: hHeap=0x570000) returned 1 [0055.039] GetLastError () returned 0x12 [0055.039] SetLastError (dwErrCode=0x12) [0055.039] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589df8 [0055.039] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589d38 [0055.039] GetLastError () returned 0x12 [0055.039] SetLastError (dwErrCode=0x12) [0055.039] GetLastError () returned 0x12 [0055.039] SetLastError (dwErrCode=0x12) [0055.039] GetLastError () returned 0x12 [0055.039] SetLastError (dwErrCode=0x12) [0055.039] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589d68 [0055.039] GetLastError () returned 0x12 [0055.039] SetLastError (dwErrCode=0x12) [0055.039] GetLastError () returned 0x12 [0055.039] SetLastError (dwErrCode=0x12) [0055.039] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e1b0 [0055.039] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0055.039] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0055.039] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589df8 | out: hHeap=0x570000) returned 1 [0055.039] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0055.039] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d68 | out: hHeap=0x570000) returned 1 [0055.039] GetLastError () returned 0x12 [0055.039] SetLastError (dwErrCode=0x12) [0055.039] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589e98 [0055.039] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d38 | out: hHeap=0x570000) returned 1 [0055.040] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e18 | out: hHeap=0x570000) returned 1 [0055.040] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58df08 [0055.040] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589d98 [0055.040] GetLastError () returned 0x12 [0055.040] SetLastError (dwErrCode=0x12) [0055.040] GetLastError () returned 0x12 [0055.040] SetLastError (dwErrCode=0x12) [0055.040] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e0f0 [0055.040] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0055.040] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0055.040] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e98 | out: hHeap=0x570000) returned 1 [0055.040] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e1b0 | out: hHeap=0x570000) returned 1 [0055.040] GetLastError () returned 0x12 [0055.040] SetLastError (dwErrCode=0x12) [0055.040] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589e98 [0055.040] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589db8 [0055.040] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589dd8 [0055.040] GetLastError () returned 0x12 [0055.040] SetLastError (dwErrCode=0x12) [0055.040] GetLastError () returned 0x12 [0055.040] SetLastError (dwErrCode=0x12) [0055.040] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e1b0 [0055.040] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0055.040] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0055.040] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e98 | out: hHeap=0x570000) returned 1 [0055.040] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0055.040] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589dd8 | out: hHeap=0x570000) returned 1 [0055.040] GetLastError () returned 0x12 [0055.040] SetLastError (dwErrCode=0x12) [0055.041] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589e28 [0055.041] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589d78 [0055.041] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5814f0 [0055.041] GetLastError () returned 0x12 [0055.041] SetLastError (dwErrCode=0x12) [0055.041] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58ba78 [0055.041] GetLastError () returned 0x12 [0055.041] SetLastError (dwErrCode=0x12) [0055.041] GetLastError () returned 0x12 [0055.041] SetLastError (dwErrCode=0x12) [0055.041] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xa0) returned 0x58bc80 [0055.041] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e38 [0055.041] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e58 [0055.041] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581650 [0055.041] GetLastError () returned 0x12 [0055.041] SetLastError (dwErrCode=0x12) [0055.041] GetLastError () returned 0x12 [0055.041] SetLastError (dwErrCode=0x12) [0055.041] GetLastError () returned 0x12 [0055.041] SetLastError (dwErrCode=0x12) [0055.041] GetLastError () returned 0x12 [0055.041] SetLastError (dwErrCode=0x12) [0055.041] GetLastError () returned 0x12 [0055.041] SetLastError (dwErrCode=0x12) [0055.041] GetLastError () returned 0x12 [0055.174] SetLastError (dwErrCode=0x12) [0055.174] GetLastError () returned 0x12 [0055.174] SetLastError (dwErrCode=0x12) [0055.174] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589dc8 [0055.174] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x6) returned 0x589eb8 [0055.174] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x5) returned 0x589d88 [0055.174] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f08 [0055.175] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x579430 [0055.175] GetLastError () returned 0x12 [0055.175] SetLastError (dwErrCode=0x12) [0055.175] GetLastError () returned 0x12 [0055.175] SetLastError (dwErrCode=0x12) [0055.175] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d18 [0055.175] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589da8 [0055.175] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589ee8 [0055.175] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x5897a8 [0055.175] GetLastError () returned 0x12 [0055.175] SetLastError (dwErrCode=0x12) [0055.175] GetLastError () returned 0x12 [0055.175] SetLastError (dwErrCode=0x12) [0055.175] GetLastError () returned 0x12 [0055.175] SetLastError (dwErrCode=0x12) [0055.175] GetLastError () returned 0x12 [0055.175] SetLastError (dwErrCode=0x12) [0055.175] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589de8 [0055.175] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589d58 [0055.175] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589d28 [0055.175] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589e48 [0055.175] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589b68 [0055.175] GetLastError () returned 0x12 [0055.175] SetLastError (dwErrCode=0x12) [0055.175] GetLastError () returned 0x12 [0055.175] SetLastError (dwErrCode=0x12) [0055.175] GetLastError () returned 0x12 [0055.175] SetLastError (dwErrCode=0x12) [0055.175] GetLastError () returned 0x12 [0055.175] SetLastError (dwErrCode=0x12) [0055.175] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589df8 [0055.176] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e68 [0055.176] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589ef8 [0055.176] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589e78 [0055.176] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c008 [0055.176] GetLastError () returned 0x12 [0055.176] SetLastError (dwErrCode=0x12) [0055.176] GetLastError () returned 0x12 [0055.176] SetLastError (dwErrCode=0x12) [0055.176] GetLastError () returned 0x12 [0055.176] SetLastError (dwErrCode=0x12) [0055.176] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x5899e8 [0055.176] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589c28 [0055.176] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5899e8 | out: hHeap=0x570000) returned 1 [0055.176] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x56) returned 0x589808 [0055.176] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x579f68 [0055.176] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x58e0f0 [0055.176] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579f68 | out: hHeap=0x570000) returned 1 [0055.176] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x87) returned 0x579f68 [0055.176] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xd) returned 0x5794d8 [0055.176] GetLastError () returned 0x12 [0055.176] SetLastError (dwErrCode=0x12) [0055.176] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda68, cchData=2 | out: lpLCData="0") returned 2 [0055.176] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x579448 [0055.176] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x58f290 [0055.176] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c558 [0055.176] GetLastError () returned 0x12 [0055.176] SetLastError (dwErrCode=0x12) [0055.176] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58f720 [0055.176] GetLastError () returned 0x12 [0055.176] SetLastError (dwErrCode=0x12) [0055.176] GetLastError () returned 0x12 [0055.176] SetLastError (dwErrCode=0x12) [0055.176] GetLastError () returned 0x12 [0055.177] SetLastError (dwErrCode=0x12) [0055.177] GetLastError () returned 0x12 [0055.177] SetLastError (dwErrCode=0x12) [0055.177] GetLastError () returned 0x12 [0055.177] SetLastError (dwErrCode=0x12) [0055.177] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d48 [0055.177] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e88 [0055.177] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581690 [0055.177] GetLastError () returned 0x12 [0055.177] SetLastError (dwErrCode=0x12) [0055.177] GetLastError () returned 0x12 [0055.177] SetLastError (dwErrCode=0x12) [0055.177] GetLastError () returned 0x12 [0055.177] SetLastError (dwErrCode=0x12) [0055.177] GetLastError () returned 0x12 [0055.177] SetLastError (dwErrCode=0x12) [0055.177] GetLastError () returned 0x12 [0055.177] SetLastError (dwErrCode=0x12) [0055.177] GetLastError () returned 0x12 [0055.177] SetLastError (dwErrCode=0x12) [0055.177] GetLastError () returned 0x12 [0055.177] SetLastError (dwErrCode=0x12) [0055.177] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e98 [0055.177] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x579538 [0055.177] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x57b8b8 [0055.177] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x57bc18 [0055.177] GetLastError () returned 0x12 [0055.177] SetLastError (dwErrCode=0x12) [0055.177] GetLastError () returned 0x12 [0055.177] SetLastError (dwErrCode=0x12) [0055.177] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589dd8 [0055.178] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589ea8 [0055.178] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d68 [0055.178] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589628 [0055.178] GetLastError () returned 0x12 [0055.178] SetLastError (dwErrCode=0x12) [0055.178] GetLastError () returned 0x12 [0055.178] SetLastError (dwErrCode=0x12) [0055.178] GetLastError () returned 0x12 [0055.178] SetLastError (dwErrCode=0x12) [0055.178] GetLastError () returned 0x12 [0055.178] SetLastError (dwErrCode=0x12) [0055.178] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589ec8 [0055.178] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589e08 [0055.178] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589ed8 [0055.178] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589d38 [0055.178] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589bc8 [0055.178] GetLastError () returned 0x12 [0055.178] SetLastError (dwErrCode=0x12) [0055.178] GetLastError () returned 0x12 [0055.178] SetLastError (dwErrCode=0x12) [0055.178] GetLastError () returned 0x12 [0055.178] SetLastError (dwErrCode=0x12) [0055.178] GetLastError () returned 0x12 [0055.178] SetLastError (dwErrCode=0x12) [0055.178] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e18 [0055.178] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a018 [0055.178] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589f28 [0055.178] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589fa8 [0055.178] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c648 [0055.178] GetLastError () returned 0x12 [0055.178] SetLastError (dwErrCode=0x12) [0055.178] GetLastError () returned 0x12 [0055.179] SetLastError (dwErrCode=0x12) [0055.179] GetLastError () returned 0x12 [0055.179] SetLastError (dwErrCode=0x12) [0055.179] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x57b428 [0055.179] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x58f928 [0055.179] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0055.179] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xac) returned 0x57b428 [0055.179] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10e) returned 0x58f9e0 [0055.179] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10e) returned 0x58faf8 [0055.179] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f9e0 | out: hHeap=0x570000) returned 1 [0055.179] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10e) returned 0x58f9e0 [0055.179] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x58d968 [0055.179] GetLastError () returned 0x12 [0055.179] SetLastError (dwErrCode=0x12) [0055.179] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda54, cchData=2 | out: lpLCData="0") returned 2 [0055.179] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58fc58 [0055.179] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x590018 [0055.179] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x583670 [0055.179] GetLastError () returned 0x12 [0055.179] SetLastError (dwErrCode=0x12) [0055.179] GetLastError () returned 0x12 [0055.179] SetLastError (dwErrCode=0x12) [0055.179] GetLastError () returned 0x12 [0055.179] SetLastError (dwErrCode=0x12) [0055.179] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c5a8 [0055.179] GetLastError () returned 0x12 [0055.179] SetLastError (dwErrCode=0x12) [0055.179] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x5904a8 [0055.179] GetLastError () returned 0x12 [0055.179] SetLastError (dwErrCode=0x12) [0055.179] GetLastError () returned 0x12 [0055.179] SetLastError (dwErrCode=0x12) [0055.179] GetLastError () returned 0x12 [0055.179] SetLastError (dwErrCode=0x12) [0055.180] GetLastError () returned 0x12 [0055.180] SetLastError (dwErrCode=0x12) [0055.180] GetLastError () returned 0x12 [0055.180] SetLastError (dwErrCode=0x12) [0055.180] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f98 [0055.180] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a098 [0055.180] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5815b0 [0055.180] GetLastError () returned 0x12 [0055.180] SetLastError (dwErrCode=0x12) [0055.180] GetLastError () returned 0x12 [0055.180] SetLastError (dwErrCode=0x12) [0055.180] GetLastError () returned 0x12 [0055.180] SetLastError (dwErrCode=0x12) [0055.180] GetLastError () returned 0x12 [0055.180] SetLastError (dwErrCode=0x12) [0055.180] GetLastError () returned 0x12 [0055.180] SetLastError (dwErrCode=0x12) [0055.180] GetLastError () returned 0x12 [0055.180] SetLastError (dwErrCode=0x12) [0055.180] GetLastError () returned 0x12 [0055.180] SetLastError (dwErrCode=0x12) [0055.180] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a038 [0055.180] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x58fdd8 [0055.180] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x58fd78 [0055.180] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x58fdf0 [0055.180] GetLastError () returned 0x12 [0055.180] SetLastError (dwErrCode=0x12) [0055.180] GetLastError () returned 0x12 [0055.180] SetLastError (dwErrCode=0x12) [0055.180] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f48 [0055.181] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a0b8 [0055.181] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589fc8 [0055.181] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589988 [0055.181] GetLastError () returned 0x12 [0055.181] SetLastError (dwErrCode=0x12) [0055.181] GetLastError () returned 0x12 [0055.181] SetLastError (dwErrCode=0x12) [0055.181] GetLastError () returned 0x12 [0055.181] SetLastError (dwErrCode=0x12) [0055.181] GetLastError () returned 0x12 [0055.181] SetLastError (dwErrCode=0x12) [0055.181] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589fb8 [0055.181] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589fd8 [0055.181] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589fe8 [0055.181] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x58a0a8 [0055.181] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589c88 [0055.181] GetLastError () returned 0x12 [0055.181] SetLastError (dwErrCode=0x12) [0055.181] GetLastError () returned 0x12 [0055.181] SetLastError (dwErrCode=0x12) [0055.181] GetLastError () returned 0x12 [0055.181] SetLastError (dwErrCode=0x12) [0055.181] GetLastError () returned 0x12 [0055.181] SetLastError (dwErrCode=0x12) [0055.181] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a048 [0055.181] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a028 [0055.181] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a068 [0055.181] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589ff8 [0055.181] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c3c8 [0055.181] GetLastError () returned 0x12 [0055.181] SetLastError (dwErrCode=0x12) [0055.181] GetLastError () returned 0x12 [0055.181] SetLastError (dwErrCode=0x12) [0055.181] GetLastError () returned 0x12 [0055.182] SetLastError (dwErrCode=0x12) [0055.182] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x5898c8 [0055.182] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589c28 | out: hHeap=0x570000) returned 1 [0055.182] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x5899e8 [0055.182] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5898c8 | out: hHeap=0x570000) returned 1 [0055.182] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xac) returned 0x5906b0 [0055.182] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x590768 [0055.182] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0055.182] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x58e0f0 [0055.182] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590768 | out: hHeap=0x570000) returned 1 [0055.182] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10e) returned 0x590768 [0055.182] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x58dd28 [0055.182] GetLastError () returned 0x12 [0055.182] SetLastError (dwErrCode=0x12) [0055.182] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda44, cchData=2 | out: lpLCData="0") returned 2 [0055.182] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58fc88 [0055.182] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x590880 [0055.182] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x5836f0 [0055.182] GetLastError () returned 0x12 [0055.182] SetLastError (dwErrCode=0x12) [0055.182] GetLastError () returned 0x12 [0055.182] SetLastError (dwErrCode=0x12) [0055.182] GetLastError () returned 0x12 [0055.183] SetLastError (dwErrCode=0x12) [0055.183] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d98 | out: hHeap=0x570000) returned 1 [0055.183] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589d98 [0055.183] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589f68 [0055.183] GetLastError () returned 0x12 [0055.183] SetLastError (dwErrCode=0x12) [0055.183] GetLastError () returned 0x12 [0055.183] SetLastError (dwErrCode=0x12) [0055.183] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x590d10 [0055.183] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x590dd0 [0055.183] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590dd0 | out: hHeap=0x570000) returned 1 [0055.183] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e28 | out: hHeap=0x570000) returned 1 [0055.183] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e1b0 | out: hHeap=0x570000) returned 1 [0055.183] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f68 | out: hHeap=0x570000) returned 1 [0055.183] GetLastError () returned 0x12 [0055.183] SetLastError (dwErrCode=0x12) [0055.183] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589f38 [0055.183] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d78 | out: hHeap=0x570000) returned 1 [0055.183] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589db8 | out: hHeap=0x570000) returned 1 [0055.183] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58faf8 | out: hHeap=0x570000) returned 1 [0055.183] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f928 | out: hHeap=0x570000) returned 1 [0055.183] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0055.183] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5899e8 | out: hHeap=0x570000) returned 1 [0055.183] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x583670 | out: hHeap=0x570000) returned 1 [0055.183] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d98 | out: hHeap=0x570000) returned 1 [0055.183] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589d78 [0055.183] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58dc10 [0055.183] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58dc38 [0055.183] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58dc10 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5836f0 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590880 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fc88 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5906b0 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590768 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58dd28 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c3c8 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a048 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a028 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a068 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ff8 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589c88 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fb8 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fd8 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fe8 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0a8 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589988 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fc8 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0b8 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f48 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fdf0 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a038 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fdd8 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fd78 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5815b0 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a098 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f98 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5904a8 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c5a8 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x583630 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590018 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fc58 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f9e0 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d968 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c648 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e18 | out: hHeap=0x570000) returned 1 [0055.184] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a018 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f28 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fa8 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589bc8 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ec8 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e08 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ed8 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d38 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589628 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d68 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ea8 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589dd8 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bc18 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e98 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579538 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b8b8 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581690 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e88 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d48 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f720 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c558 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579448 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589808 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579f68 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5794d8 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c008 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589df8 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e68 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ef8 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e78 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589b68 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589de8 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d58 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d28 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e48 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5897a8 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ee8 | out: hHeap=0x570000) returned 1 [0055.185] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589da8 | out: hHeap=0x570000) returned 1 [0055.186] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d18 | out: hHeap=0x570000) returned 1 [0055.186] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579430 | out: hHeap=0x570000) returned 1 [0055.186] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f08 | out: hHeap=0x570000) returned 1 [0055.186] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589dc8 | out: hHeap=0x570000) returned 1 [0055.186] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589eb8 | out: hHeap=0x570000) returned 1 [0055.186] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d88 | out: hHeap=0x570000) returned 1 [0055.186] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581650 | out: hHeap=0x570000) returned 1 [0055.186] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e58 | out: hHeap=0x570000) returned 1 [0055.186] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e38 | out: hHeap=0x570000) returned 1 [0055.186] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ba78 | out: hHeap=0x570000) returned 1 [0055.186] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5814f0 | out: hHeap=0x570000) returned 1 [0055.186] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58bc80 | out: hHeap=0x570000) returned 1 [0055.186] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d78 | out: hHeap=0x570000) returned 1 [0055.186] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58df08 | out: hHeap=0x570000) returned 1 [0055.186] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1e) returned 0x58df08 [0055.186] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58dc38 | out: hHeap=0x570000) returned 1 [0055.186] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x218 [0055.196] Process32FirstW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0055.197] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0055.198] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0055.199] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0055.199] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0055.200] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0055.201] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0055.202] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0055.203] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0055.204] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.205] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0055.205] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0055.206] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.207] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0055.208] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.209] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.220] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.228] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.228] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.229] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.230] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.231] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.232] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.233] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.234] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0055.234] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.235] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0055.236] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0055.237] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.238] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0055.239] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0055.239] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0055.240] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0055.241] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0055.242] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0055.243] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0055.244] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0055.245] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0055.246] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending-windsor.exe")) returned 1 [0055.247] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="workers_offline_scripts.exe")) returned 1 [0055.248] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sharesamerican.exe")) returned 1 [0055.248] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x764, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="clara-cancer-holder.exe")) returned 1 [0055.249] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="authoracrossci.exe")) returned 1 [0055.250] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="critics_herbal_amplifier.exe")) returned 1 [0055.251] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hugestdlook.exe")) returned 1 [0055.252] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="terraceregistered.exe")) returned 1 [0055.253] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x514, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="poly_actually.exe")) returned 1 [0055.253] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="inn.exe")) returned 1 [0055.254] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fluidheating.exe")) returned 1 [0055.255] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0055.256] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="qualifications.exe")) returned 1 [0055.257] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="lauderdale transmitted washer.exe")) returned 1 [0055.258] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane.exe")) returned 1 [0055.259] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="saving.exe")) returned 1 [0055.259] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd40, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fred_j_species.exe")) returned 1 [0055.340] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="poster.exe")) returned 1 [0055.341] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept cheaper.exe")) returned 1 [0055.341] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="shooting.exe")) returned 1 [0055.343] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="protection.exe")) returned 1 [0055.344] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0055.345] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0055.345] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0055.346] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0055.347] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0055.348] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0055.349] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0055.350] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0055.350] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0055.351] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0055.352] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0055.353] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0055.356] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0055.356] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0055.357] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0055.358] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0055.359] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0055.360] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0055.361] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0055.362] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0055.363] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0055.363] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0055.364] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0055.365] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0055.366] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0055.367] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0055.368] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0055.369] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0055.370] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0055.370] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0055.371] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0055.372] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0055.373] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0055.374] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0055.375] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0055.381] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0055.382] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0055.382] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0055.383] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0055.384] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0055.385] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0055.386] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0055.387] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0055.388] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bra acoustic sink.exe")) returned 1 [0055.392] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="langaprsubmit.exe")) returned 1 [0055.393] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1110, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0055.393] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0055.394] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0055.395] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0055.396] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0055.397] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0055.397] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0055.398] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x126c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.399] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11fc, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0055.400] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11e4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0055.410] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1170, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0055.411] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1170, pcPriClassBase=8, dwFlags=0x0, szExeFile="vinfk.exe")) returned 1 [0055.411] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.412] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0055.413] CloseHandle (hObject=0x218) returned 1 [0055.413] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0c0 | out: hHeap=0x570000) returned 1 [0055.413] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58e0c0 [0055.413] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58db70 [0055.413] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58db70 | out: hHeap=0x570000) returned 1 [0055.413] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x5834b0 [0055.413] GetLastError () returned 0x12 [0055.413] SetLastError (dwErrCode=0x12) [0055.413] GetLastError () returned 0x12 [0055.413] SetLastError (dwErrCode=0x12) [0055.413] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57b428 [0055.413] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0055.413] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0055.413] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f38 | out: hHeap=0x570000) returned 1 [0055.413] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590d10 | out: hHeap=0x570000) returned 1 [0055.413] GetLastError () returned 0x12 [0055.413] SetLastError (dwErrCode=0x12) [0055.413] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x58a0a8 [0055.414] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589f78 [0055.414] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589fa8 [0055.414] GetLastError () returned 0x12 [0055.414] SetLastError (dwErrCode=0x12) [0055.414] GetLastError () returned 0x12 [0055.414] SetLastError (dwErrCode=0x12) [0055.414] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e0f0 [0055.414] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0055.414] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0055.414] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0a8 | out: hHeap=0x570000) returned 1 [0055.414] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0055.414] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fa8 | out: hHeap=0x570000) returned 1 [0055.414] GetLastError () returned 0x12 [0055.414] SetLastError (dwErrCode=0x12) [0055.414] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589f58 [0055.414] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589f48 [0055.414] GetLastError () returned 0x12 [0055.414] SetLastError (dwErrCode=0x12) [0055.414] GetLastError () returned 0x12 [0055.414] SetLastError (dwErrCode=0x12) [0055.414] GetLastError () returned 0x12 [0055.414] SetLastError (dwErrCode=0x12) [0055.414] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x58a058 [0055.414] GetLastError () returned 0x12 [0055.414] SetLastError (dwErrCode=0x12) [0055.414] GetLastError () returned 0x12 [0055.414] SetLastError (dwErrCode=0x12) [0055.414] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e1b0 [0055.414] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0055.414] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0055.414] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f58 | out: hHeap=0x570000) returned 1 [0055.415] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0055.415] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a058 | out: hHeap=0x570000) returned 1 [0055.415] GetLastError () returned 0x12 [0055.415] SetLastError (dwErrCode=0x12) [0055.415] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589fc8 [0055.415] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f48 | out: hHeap=0x570000) returned 1 [0055.415] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f78 | out: hHeap=0x570000) returned 1 [0055.415] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58da08 [0055.415] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x58a0a8 [0055.415] GetLastError () returned 0x12 [0055.415] SetLastError (dwErrCode=0x12) [0055.415] GetLastError () returned 0x12 [0055.415] SetLastError (dwErrCode=0x12) [0055.415] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e0f0 [0055.415] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0055.415] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0055.415] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fc8 | out: hHeap=0x570000) returned 1 [0055.415] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e1b0 | out: hHeap=0x570000) returned 1 [0055.415] GetLastError () returned 0x12 [0055.415] SetLastError (dwErrCode=0x12) [0055.415] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589fe8 [0055.415] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x58a088 [0055.415] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589f68 [0055.415] GetLastError () returned 0x12 [0055.415] SetLastError (dwErrCode=0x12) [0055.415] GetLastError () returned 0x12 [0055.415] SetLastError (dwErrCode=0x12) [0055.415] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e1b0 [0055.416] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0055.416] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0055.416] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fe8 | out: hHeap=0x570000) returned 1 [0055.416] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0055.416] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f68 | out: hHeap=0x570000) returned 1 [0055.416] GetLastError () returned 0x12 [0055.416] SetLastError (dwErrCode=0x12) [0055.416] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589fd8 [0055.416] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589f98 [0055.416] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581350 [0055.416] GetLastError () returned 0x12 [0055.416] SetLastError (dwErrCode=0x12) [0055.416] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58ba78 [0055.416] GetLastError () returned 0x12 [0055.416] SetLastError (dwErrCode=0x12) [0055.416] GetLastError () returned 0x12 [0055.416] SetLastError (dwErrCode=0x12) [0055.416] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xa0) returned 0x58bc80 [0055.416] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a098 [0055.416] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a0b8 [0055.416] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5815b0 [0055.418] GetLastError () returned 0x12 [0055.418] SetLastError (dwErrCode=0x12) [0055.418] GetLastError () returned 0x12 [0055.418] SetLastError (dwErrCode=0x12) [0055.418] GetLastError () returned 0x12 [0055.418] SetLastError (dwErrCode=0x12) [0055.418] GetLastError () returned 0x12 [0055.418] SetLastError (dwErrCode=0x12) [0055.418] GetLastError () returned 0x12 [0055.418] SetLastError (dwErrCode=0x12) [0055.418] GetLastError () returned 0x12 [0055.418] SetLastError (dwErrCode=0x12) [0055.418] GetLastError () returned 0x12 [0055.418] SetLastError (dwErrCode=0x12) [0055.418] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f58 [0055.418] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x6) returned 0x589fb8 [0055.418] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x5) returned 0x58a058 [0055.418] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a008 [0055.419] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x579430 [0055.419] GetLastError () returned 0x12 [0055.419] SetLastError (dwErrCode=0x12) [0055.419] GetLastError () returned 0x12 [0055.419] SetLastError (dwErrCode=0x12) [0055.419] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f28 [0055.419] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a048 [0055.419] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589fa8 [0055.419] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589688 [0055.419] GetLastError () returned 0x12 [0055.419] SetLastError (dwErrCode=0x12) [0055.419] GetLastError () returned 0x12 [0055.419] SetLastError (dwErrCode=0x12) [0055.419] GetLastError () returned 0x12 [0055.419] SetLastError (dwErrCode=0x12) [0055.419] GetLastError () returned 0x12 [0055.419] SetLastError (dwErrCode=0x12) [0055.419] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a028 [0055.419] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f18 [0055.419] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f68 [0055.419] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589fc8 [0055.419] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x5895c8 [0055.419] GetLastError () returned 0x12 [0055.419] SetLastError (dwErrCode=0x12) [0055.419] GetLastError () returned 0x12 [0055.419] SetLastError (dwErrCode=0x12) [0055.419] GetLastError () returned 0x12 [0055.419] SetLastError (dwErrCode=0x12) [0055.419] GetLastError () returned 0x12 [0055.419] SetLastError (dwErrCode=0x12) [0055.419] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f38 [0055.420] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589fe8 [0055.420] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a078 [0055.420] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a038 [0055.420] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c148 [0055.420] GetLastError () returned 0x12 [0055.420] SetLastError (dwErrCode=0x12) [0055.420] GetLastError () returned 0x12 [0055.420] SetLastError (dwErrCode=0x12) [0055.420] GetLastError () returned 0x12 [0055.420] SetLastError (dwErrCode=0x12) [0055.420] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589508 [0055.420] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x5898c8 [0055.420] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589508 | out: hHeap=0x570000) returned 1 [0055.420] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x56) returned 0x5897a8 [0055.420] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x579f68 [0055.420] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x58e0f0 [0055.420] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579f68 | out: hHeap=0x570000) returned 1 [0055.420] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x87) returned 0x579f68 [0055.420] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xd) returned 0x5794d8 [0055.420] GetLastError () returned 0x12 [0055.420] SetLastError (dwErrCode=0x12) [0055.420] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda68, cchData=2 | out: lpLCData="0") returned 2 [0055.420] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x579538 [0055.420] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x58f290 [0055.420] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c5f8 [0055.420] GetLastError () returned 0x12 [0055.420] SetLastError (dwErrCode=0x12) [0055.420] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58f720 [0055.420] GetLastError () returned 0x12 [0055.420] SetLastError (dwErrCode=0x12) [0055.420] GetLastError () returned 0x12 [0055.420] SetLastError (dwErrCode=0x12) [0055.421] GetLastError () returned 0x12 [0055.421] SetLastError (dwErrCode=0x12) [0055.421] GetLastError () returned 0x12 [0055.421] SetLastError (dwErrCode=0x12) [0055.421] GetLastError () returned 0x12 [0055.421] SetLastError (dwErrCode=0x12) [0055.421] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f48 [0055.421] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a0c8 [0055.421] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581490 [0055.421] GetLastError () returned 0x12 [0055.421] SetLastError (dwErrCode=0x12) [0055.421] GetLastError () returned 0x12 [0055.421] SetLastError (dwErrCode=0x12) [0055.421] GetLastError () returned 0x12 [0055.421] SetLastError (dwErrCode=0x12) [0055.421] GetLastError () returned 0x12 [0055.421] SetLastError (dwErrCode=0x12) [0055.421] GetLastError () returned 0x12 [0055.421] SetLastError (dwErrCode=0x12) [0055.421] GetLastError () returned 0x12 [0055.421] SetLastError (dwErrCode=0x12) [0055.421] GetLastError () returned 0x12 [0055.421] SetLastError (dwErrCode=0x12) [0055.421] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a018 [0055.421] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x579448 [0055.421] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x57b8b8 [0055.421] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x57bc18 [0055.421] GetLastError () returned 0x12 [0055.421] SetLastError (dwErrCode=0x12) [0055.421] GetLastError () returned 0x12 [0055.421] SetLastError (dwErrCode=0x12) [0055.422] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589ff8 [0055.422] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a0d8 [0055.422] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a068 [0055.422] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589bc8 [0055.422] GetLastError () returned 0x12 [0055.422] SetLastError (dwErrCode=0x12) [0055.422] GetLastError () returned 0x12 [0055.422] SetLastError (dwErrCode=0x12) [0055.422] GetLastError () returned 0x12 [0055.422] SetLastError (dwErrCode=0x12) [0055.422] GetLastError () returned 0x12 [0055.422] SetLastError (dwErrCode=0x12) [0055.422] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f78 [0055.422] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589f88 [0055.422] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589ed8 [0055.422] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589ec8 [0055.422] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589568 [0055.422] GetLastError () returned 0x12 [0055.422] SetLastError (dwErrCode=0x12) [0055.422] GetLastError () returned 0x12 [0055.422] SetLastError (dwErrCode=0x12) [0055.422] GetLastError () returned 0x12 [0055.422] SetLastError (dwErrCode=0x12) [0055.422] GetLastError () returned 0x12 [0055.422] SetLastError (dwErrCode=0x12) [0055.422] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e48 [0055.422] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d98 [0055.422] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589ee8 [0055.422] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589d28 [0055.422] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c1e8 [0055.423] GetLastError () returned 0x12 [0055.423] SetLastError (dwErrCode=0x12) [0055.423] GetLastError () returned 0x12 [0055.423] SetLastError (dwErrCode=0x12) [0055.423] GetLastError () returned 0x12 [0055.423] SetLastError (dwErrCode=0x12) [0055.423] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x57b428 [0055.423] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x58f928 [0055.423] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0055.423] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xac) returned 0x57b428 [0055.423] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10e) returned 0x58f9e0 [0055.423] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10e) returned 0x58faf8 [0055.423] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f9e0 | out: hHeap=0x570000) returned 1 [0055.423] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10e) returned 0x58f9e0 [0055.423] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x58dc88 [0055.423] GetLastError () returned 0x12 [0055.423] SetLastError (dwErrCode=0x12) [0055.423] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda54, cchData=2 | out: lpLCData="0") returned 2 [0055.423] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58fcd0 [0055.423] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x590018 [0055.423] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x5834f0 [0055.423] GetLastError () returned 0x12 [0055.423] SetLastError (dwErrCode=0x12) [0055.423] GetLastError () returned 0x12 [0055.423] SetLastError (dwErrCode=0x12) [0055.423] GetLastError () returned 0x12 [0055.423] SetLastError (dwErrCode=0x12) [0055.423] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c558 [0055.423] GetLastError () returned 0x12 [0055.423] SetLastError (dwErrCode=0x12) [0055.423] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x5904a8 [0055.423] GetLastError () returned 0x12 [0055.423] SetLastError (dwErrCode=0x12) [0055.424] GetLastError () returned 0x12 [0055.424] SetLastError (dwErrCode=0x12) [0055.424] GetLastError () returned 0x12 [0055.424] SetLastError (dwErrCode=0x12) [0055.424] GetLastError () returned 0x12 [0055.424] SetLastError (dwErrCode=0x12) [0055.424] GetLastError () returned 0x12 [0055.424] SetLastError (dwErrCode=0x12) [0055.424] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d38 [0055.424] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e18 [0055.424] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581430 [0055.424] GetLastError () returned 0x12 [0055.424] SetLastError (dwErrCode=0x12) [0055.424] GetLastError () returned 0x12 [0055.424] SetLastError (dwErrCode=0x12) [0055.424] GetLastError () returned 0x12 [0055.424] SetLastError (dwErrCode=0x12) [0055.424] GetLastError () returned 0x12 [0055.424] SetLastError (dwErrCode=0x12) [0055.424] GetLastError () returned 0x12 [0055.424] SetLastError (dwErrCode=0x12) [0055.424] GetLastError () returned 0x12 [0055.424] SetLastError (dwErrCode=0x12) [0055.424] GetLastError () returned 0x12 [0055.424] SetLastError (dwErrCode=0x12) [0055.424] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e68 [0055.424] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x58fdd8 [0055.424] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x58fef8 [0055.424] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x58fe50 [0055.424] GetLastError () returned 0x12 [0055.424] SetLastError (dwErrCode=0x12) [0055.424] GetLastError () returned 0x12 [0055.425] SetLastError (dwErrCode=0x12) [0055.425] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e58 [0055.425] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e78 [0055.425] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589eb8 [0055.425] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589aa8 [0055.425] GetLastError () returned 0x12 [0055.425] SetLastError (dwErrCode=0x12) [0055.425] GetLastError () returned 0x12 [0055.425] SetLastError (dwErrCode=0x12) [0055.425] GetLastError () returned 0x12 [0055.425] SetLastError (dwErrCode=0x12) [0055.425] GetLastError () returned 0x12 [0055.425] SetLastError (dwErrCode=0x12) [0055.425] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589da8 [0055.425] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d48 [0055.425] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589ef8 [0055.425] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589e88 [0055.425] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589c88 [0055.425] GetLastError () returned 0x12 [0055.425] SetLastError (dwErrCode=0x12) [0055.425] GetLastError () returned 0x12 [0055.425] SetLastError (dwErrCode=0x12) [0055.425] GetLastError () returned 0x12 [0055.425] SetLastError (dwErrCode=0x12) [0055.425] GetLastError () returned 0x12 [0055.425] SetLastError (dwErrCode=0x12) [0055.425] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f08 [0055.425] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589ea8 [0055.425] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d18 [0055.425] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589d58 [0055.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58bf68 [0055.426] GetLastError () returned 0x12 [0055.426] SetLastError (dwErrCode=0x12) [0055.426] GetLastError () returned 0x12 [0055.426] SetLastError (dwErrCode=0x12) [0055.426] GetLastError () returned 0x12 [0055.426] SetLastError (dwErrCode=0x12) [0055.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589b08 [0055.426] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5898c8 | out: hHeap=0x570000) returned 1 [0055.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589b68 [0055.426] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589b08 | out: hHeap=0x570000) returned 1 [0055.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xac) returned 0x5906b0 [0055.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x590768 [0055.426] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0055.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x58e0f0 [0055.426] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590768 | out: hHeap=0x570000) returned 1 [0055.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10e) returned 0x590768 [0055.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x58dbe8 [0055.426] GetLastError () returned 0x12 [0055.426] SetLastError (dwErrCode=0x12) [0055.426] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda44, cchData=2 | out: lpLCData="0") returned 2 [0055.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58fca0 [0055.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x590880 [0055.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x583530 [0055.426] GetLastError () returned 0x12 [0055.426] SetLastError (dwErrCode=0x12) [0055.426] GetLastError () returned 0x12 [0055.426] SetLastError (dwErrCode=0x12) [0055.426] GetLastError () returned 0x12 [0055.426] SetLastError (dwErrCode=0x12) [0055.426] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0a8 | out: hHeap=0x570000) returned 1 [0055.426] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x58a0a8 [0055.427] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589d68 [0055.427] GetLastError () returned 0x12 [0055.427] SetLastError (dwErrCode=0x12) [0055.427] GetLastError () returned 0x12 [0055.427] SetLastError (dwErrCode=0x12) [0055.427] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x590d10 [0055.427] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x590dd0 [0055.427] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590dd0 | out: hHeap=0x570000) returned 1 [0055.427] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fd8 | out: hHeap=0x570000) returned 1 [0055.427] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e1b0 | out: hHeap=0x570000) returned 1 [0055.427] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d68 | out: hHeap=0x570000) returned 1 [0055.427] GetLastError () returned 0x12 [0055.427] SetLastError (dwErrCode=0x12) [0055.427] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589e98 [0055.427] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f98 | out: hHeap=0x570000) returned 1 [0055.427] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a088 | out: hHeap=0x570000) returned 1 [0055.427] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58faf8 | out: hHeap=0x570000) returned 1 [0055.427] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f928 | out: hHeap=0x570000) returned 1 [0055.427] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0055.427] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589b68 | out: hHeap=0x570000) returned 1 [0055.427] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5834f0 | out: hHeap=0x570000) returned 1 [0055.427] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0a8 | out: hHeap=0x570000) returned 1 [0055.427] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589f98 [0055.427] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58daa8 [0055.427] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58dc10 [0055.427] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58daa8 | out: hHeap=0x570000) returned 1 [0055.427] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x583530 | out: hHeap=0x570000) returned 1 [0055.427] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590880 | out: hHeap=0x570000) returned 1 [0055.427] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fca0 | out: hHeap=0x570000) returned 1 [0055.427] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5906b0 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590768 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58dbe8 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58bf68 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f08 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ea8 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d18 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d58 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589c88 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589da8 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d48 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ef8 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e88 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589aa8 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589eb8 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e78 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e58 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fe50 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e68 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fdd8 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fef8 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581430 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e18 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d38 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5904a8 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c558 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5834b0 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590018 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58fcd0 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f9e0 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58dc88 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c1e8 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e48 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d98 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ee8 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d28 | out: hHeap=0x570000) returned 1 [0055.428] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589568 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f78 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f88 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ed8 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ec8 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589bc8 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a068 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0d8 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ff8 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bc18 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a018 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579448 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b8b8 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581490 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0c8 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f48 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f720 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c5f8 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579538 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5897a8 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579f68 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5794d8 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c148 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f38 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fe8 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a078 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a038 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5895c8 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a028 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f18 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f68 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fc8 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589688 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fa8 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a048 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f28 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579430 | out: hHeap=0x570000) returned 1 [0055.429] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a008 | out: hHeap=0x570000) returned 1 [0055.430] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f58 | out: hHeap=0x570000) returned 1 [0055.430] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fb8 | out: hHeap=0x570000) returned 1 [0055.430] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a058 | out: hHeap=0x570000) returned 1 [0055.430] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5815b0 | out: hHeap=0x570000) returned 1 [0055.430] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0b8 | out: hHeap=0x570000) returned 1 [0055.430] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a098 | out: hHeap=0x570000) returned 1 [0055.430] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ba78 | out: hHeap=0x570000) returned 1 [0055.430] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581350 | out: hHeap=0x570000) returned 1 [0055.430] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58bc80 | out: hHeap=0x570000) returned 1 [0055.430] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f98 | out: hHeap=0x570000) returned 1 [0055.430] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58da08 | out: hHeap=0x570000) returned 1 [0055.430] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x1a) returned 0x58da30 [0055.430] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58dc10 | out: hHeap=0x570000) returned 1 [0055.430] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x210 [0055.465] Process32FirstW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0055.465] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0055.466] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0055.467] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0055.468] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0055.469] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0055.470] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0055.470] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0055.471] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0055.472] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.473] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0055.474] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0055.475] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.476] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0055.476] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x61, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.477] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.478] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.479] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.480] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.481] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.482] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.483] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.484] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.485] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.485] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0055.486] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.487] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0055.488] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0055.489] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.492] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0055.497] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0055.501] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0055.524] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0055.540] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0055.543] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0055.547] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0055.549] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0055.552] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0055.554] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending-windsor.exe")) returned 1 [0055.572] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="workers_offline_scripts.exe")) returned 1 [0055.588] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sharesamerican.exe")) returned 1 [0055.588] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x764, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="clara-cancer-holder.exe")) returned 1 [0055.589] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="authoracrossci.exe")) returned 1 [0055.590] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="critics_herbal_amplifier.exe")) returned 1 [0055.591] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hugestdlook.exe")) returned 1 [0055.592] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="terraceregistered.exe")) returned 1 [0055.593] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x514, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="poly_actually.exe")) returned 1 [0055.594] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="inn.exe")) returned 1 [0055.594] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fluidheating.exe")) returned 1 [0055.595] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0055.596] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="qualifications.exe")) returned 1 [0055.597] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="lauderdale transmitted washer.exe")) returned 1 [0055.598] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane.exe")) returned 1 [0055.599] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="saving.exe")) returned 1 [0055.600] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd40, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fred_j_species.exe")) returned 1 [0055.601] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="poster.exe")) returned 1 [0055.601] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept cheaper.exe")) returned 1 [0055.602] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="shooting.exe")) returned 1 [0055.603] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="protection.exe")) returned 1 [0055.604] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0055.605] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0055.606] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0055.607] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0055.608] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0055.608] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0055.609] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0055.610] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0055.611] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0055.612] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0055.613] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0055.613] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0055.616] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0055.639] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0055.646] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0055.648] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0055.649] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0055.650] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0055.651] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0055.652] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0055.653] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0055.654] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0055.655] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0055.656] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0055.656] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0055.657] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0055.658] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0055.659] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0055.660] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0055.661] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0055.662] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0055.662] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0055.663] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0055.664] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0055.665] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0055.666] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0055.667] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0055.668] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0055.669] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0055.670] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0055.670] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0055.671] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0055.672] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0055.673] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bra acoustic sink.exe")) returned 1 [0055.674] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="langaprsubmit.exe")) returned 1 [0055.675] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1110, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0055.676] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0055.676] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0055.677] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0055.678] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0055.679] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0055.680] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0055.681] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x126c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.681] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11fc, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0055.685] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11e4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0055.685] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1170, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0055.686] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1170, pcPriClassBase=8, dwFlags=0x0, szExeFile="vinfk.exe")) returned 1 [0055.687] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.688] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0055.688] CloseHandle (hObject=0x210) returned 1 [0055.688] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0c0 | out: hHeap=0x570000) returned 1 [0055.688] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58e0c0 [0055.688] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58dcd8 [0055.689] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58dcd8 | out: hHeap=0x570000) returned 1 [0055.689] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x5834b0 [0055.689] GetLastError () returned 0x12 [0055.689] SetLastError (dwErrCode=0x12) [0055.689] GetLastError () returned 0x12 [0055.689] SetLastError (dwErrCode=0x12) [0055.689] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57b428 [0055.689] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0055.689] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0055.689] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e98 | out: hHeap=0x570000) returned 1 [0055.689] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590d10 | out: hHeap=0x570000) returned 1 [0055.689] GetLastError () returned 0x12 [0055.689] SetLastError (dwErrCode=0x12) [0055.689] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x58a068 [0055.689] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x58a058 [0055.689] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589f28 [0055.689] GetLastError () returned 0x12 [0055.689] SetLastError (dwErrCode=0x12) [0055.689] GetLastError () returned 0x12 [0055.689] SetLastError (dwErrCode=0x12) [0055.689] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e0f0 [0055.689] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0055.689] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0055.689] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a068 | out: hHeap=0x570000) returned 1 [0055.689] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0055.689] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f28 | out: hHeap=0x570000) returned 1 [0055.689] GetLastError () returned 0x12 [0055.689] SetLastError (dwErrCode=0x12) [0055.690] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589f48 [0055.690] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x58a0b8 [0055.690] GetLastError () returned 0x12 [0055.690] SetLastError (dwErrCode=0x12) [0055.690] GetLastError () returned 0x12 [0055.690] SetLastError (dwErrCode=0x12) [0055.690] GetLastError () returned 0x12 [0055.690] SetLastError (dwErrCode=0x12) [0055.690] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x58a068 [0055.690] GetLastError () returned 0x12 [0055.690] SetLastError (dwErrCode=0x12) [0055.690] GetLastError () returned 0x12 [0055.690] SetLastError (dwErrCode=0x12) [0055.690] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e1b0 [0055.690] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0055.690] SetLastError (dwErrCode=0x12) [0055.690] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589f38 [0055.690] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58dc38 [0055.690] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589ff8 [0055.690] GetLastError () returned 0x12 [0055.690] SetLastError (dwErrCode=0x12) [0055.690] GetLastError () returned 0x12 [0055.690] SetLastError (dwErrCode=0x12) [0055.690] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e0f0 [0055.690] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0055.691] GetLastError () returned 0x12 [0055.691] SetLastError (dwErrCode=0x12) [0055.691] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589f48 [0055.691] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589fe8 [0055.691] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589fa8 [0055.691] GetLastError () returned 0x12 [0055.691] SetLastError (dwErrCode=0x12) [0055.691] GetLastError () returned 0x12 [0055.691] SetLastError (dwErrCode=0x12) [0055.691] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e1b0 [0055.691] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0055.691] SetLastError (dwErrCode=0x12) [0055.691] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x58a038 [0055.691] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589f68 [0055.691] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581650 [0055.691] GetLastError () returned 0x12 [0055.691] SetLastError (dwErrCode=0x12) [0055.691] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58ba78 [0055.691] GetLastError () returned 0x12 [0055.691] SetLastError (dwErrCode=0x12) [0055.691] GetLastError () returned 0x12 [0055.691] SetLastError (dwErrCode=0x12) [0055.691] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xa0) returned 0x58bc80 [0055.691] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a0a8 [0055.691] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f58 [0055.691] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581430 [0055.691] GetLastError () returned 0x12 [0055.692] SetLastError (dwErrCode=0x12) [0055.692] GetLastError () returned 0x12 [0055.692] SetLastError (dwErrCode=0x12) [0055.692] GetLastError () returned 0x12 [0055.692] SetLastError (dwErrCode=0x12) [0055.692] GetLastError () returned 0x12 [0055.692] SetLastError (dwErrCode=0x12) [0055.692] GetLastError () returned 0x12 [0055.692] SetLastError (dwErrCode=0x12) [0055.692] GetLastError () returned 0x12 [0055.692] SetLastError (dwErrCode=0x12) [0055.692] GetLastError () returned 0x12 [0055.692] SetLastError (dwErrCode=0x12) [0055.692] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a098 [0055.692] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x6) returned 0x58a058 [0055.692] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x5) returned 0x589f38 [0055.692] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a028 [0055.692] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x579430 [0055.692] GetLastError () returned 0x12 [0055.692] SetLastError (dwErrCode=0x12) [0055.692] GetLastError () returned 0x12 [0055.692] SetLastError (dwErrCode=0x12) [0055.692] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a048 [0055.692] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f78 [0055.692] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f88 [0055.692] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589c88 [0055.692] GetLastError () returned 0x12 [0055.692] SetLastError (dwErrCode=0x12) [0055.692] GetLastError () returned 0x12 [0055.693] SetLastError (dwErrCode=0x12) [0055.693] GetLastError () returned 0x12 [0055.693] SetLastError (dwErrCode=0x12) [0055.693] GetLastError () returned 0x12 [0055.693] SetLastError (dwErrCode=0x12) [0055.693] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f98 [0055.693] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a008 [0055.693] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a0d8 [0055.693] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589fa8 [0055.693] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589a48 [0055.693] GetLastError () returned 0x12 [0055.693] SetLastError (dwErrCode=0x12) [0055.693] GetLastError () returned 0x12 [0055.693] SetLastError (dwErrCode=0x12) [0055.693] GetLastError () returned 0x12 [0055.693] SetLastError (dwErrCode=0x12) [0055.693] GetLastError () returned 0x12 [0055.693] SetLastError (dwErrCode=0x12) [0055.693] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a018 [0055.693] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f48 [0055.693] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589fb8 [0055.693] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589f18 [0055.693] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c558 [0055.693] GetLastError () returned 0x12 [0055.693] SetLastError (dwErrCode=0x12) [0055.693] GetLastError () returned 0x12 [0055.693] SetLastError (dwErrCode=0x12) [0055.693] GetLastError () returned 0x12 [0055.693] SetLastError (dwErrCode=0x12) [0055.693] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589868 [0055.693] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589808 [0055.693] SetLastError (dwErrCode=0x12) [0055.693] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda68, cchData=2 | out: lpLCData="0") returned 2 [0055.694] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x5794d8 [0055.694] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x58f290 [0055.694] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c198 [0055.694] GetLastError () returned 0x12 [0055.694] SetLastError (dwErrCode=0x12) [0055.694] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58f720 [0055.694] GetLastError () returned 0x12 [0055.694] SetLastError (dwErrCode=0x12) [0055.694] GetLastError () returned 0x12 [0055.694] SetLastError (dwErrCode=0x12) [0055.694] GetLastError () returned 0x12 [0055.694] SetLastError (dwErrCode=0x12) [0055.694] GetLastError () returned 0x12 [0055.694] SetLastError (dwErrCode=0x12) [0055.694] GetLastError () returned 0x12 [0055.694] SetLastError (dwErrCode=0x12) [0055.694] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a068 [0055.694] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589fc8 [0055.694] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581490 [0055.694] GetLastError () returned 0x12 [0055.694] SetLastError (dwErrCode=0x12) [0055.694] GetLastError () returned 0x12 [0055.694] SetLastError (dwErrCode=0x12) [0055.694] GetLastError () returned 0x12 [0055.694] SetLastError (dwErrCode=0x12) [0055.694] GetLastError () returned 0x12 [0055.694] SetLastError (dwErrCode=0x12) [0055.694] GetLastError () returned 0x12 [0055.694] SetLastError (dwErrCode=0x12) [0055.694] GetLastError () returned 0x12 [0055.694] SetLastError (dwErrCode=0x12) [0055.694] GetLastError () returned 0x12 [0055.695] SetLastError (dwErrCode=0x12) [0055.695] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a088 [0055.695] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x579538 [0055.695] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x57b8b8 [0055.695] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x57bc18 [0055.695] GetLastError () returned 0x12 [0055.695] SetLastError (dwErrCode=0x12) [0055.695] GetLastError () returned 0x12 [0055.695] SetLastError (dwErrCode=0x12) [0055.695] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589fd8 [0055.695] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a078 [0055.695] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a0b8 [0055.695] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x5897a8 [0055.695] GetLastError () returned 0x12 [0055.695] SetLastError (dwErrCode=0x12) [0055.695] GetLastError () returned 0x12 [0055.695] SetLastError (dwErrCode=0x12) [0055.695] GetLastError () returned 0x12 [0055.695] SetLastError (dwErrCode=0x12) [0055.695] GetLastError () returned 0x12 [0055.695] SetLastError (dwErrCode=0x12) [0055.695] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a0c8 [0055.695] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589f28 [0055.695] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589e58 [0055.695] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589e78 [0055.695] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589868 [0055.695] GetLastError () returned 0x12 [0055.695] SetLastError (dwErrCode=0x12) [0055.696] GetLastError () returned 0x12 [0055.696] SetLastError (dwErrCode=0x12) [0055.696] GetLastError () returned 0x12 [0055.696] SetLastError (dwErrCode=0x12) [0055.696] GetLastError () returned 0x12 [0055.696] SetLastError (dwErrCode=0x12) [0055.696] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589eb8 [0055.696] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d78 [0055.696] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589f08 [0055.696] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589ee8 [0055.696] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c6e8 [0055.696] GetLastError () returned 0x12 [0055.696] SetLastError (dwErrCode=0x12) [0055.696] GetLastError () returned 0x12 [0055.696] SetLastError (dwErrCode=0x12) [0055.696] GetLastError () returned 0x12 [0055.696] SetLastError (dwErrCode=0x12) [0055.696] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x57b428 [0055.696] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x58f928 [0055.696] SetLastError (dwErrCode=0x12) [0055.696] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda54, cchData=2 | out: lpLCData="0") returned 2 [0055.696] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58fdd8 [0055.696] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x590018 [0055.696] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x5834f0 [0055.696] GetLastError () returned 0x12 [0055.696] SetLastError (dwErrCode=0x12) [0055.696] GetLastError () returned 0x12 [0055.696] SetLastError (dwErrCode=0x12) [0055.696] GetLastError () returned 0x12 [0055.696] SetLastError (dwErrCode=0x12) [0055.696] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c648 [0055.696] GetLastError () returned 0x12 [0055.697] SetLastError (dwErrCode=0x12) [0055.697] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x5904a8 [0055.697] GetLastError () returned 0x12 [0055.697] SetLastError (dwErrCode=0x12) [0055.697] GetLastError () returned 0x12 [0055.697] SetLastError (dwErrCode=0x12) [0055.697] GetLastError () returned 0x12 [0055.697] SetLastError (dwErrCode=0x12) [0055.697] GetLastError () returned 0x12 [0055.697] SetLastError (dwErrCode=0x12) [0055.697] GetLastError () returned 0x12 [0055.697] SetLastError (dwErrCode=0x12) [0055.697] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589d18 [0055.697] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589dd8 [0055.697] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5814d0 [0055.697] GetLastError () returned 0x12 [0055.697] SetLastError (dwErrCode=0x12) [0055.697] GetLastError () returned 0x12 [0055.697] SetLastError (dwErrCode=0x12) [0055.697] GetLastError () returned 0x12 [0055.697] SetLastError (dwErrCode=0x12) [0055.697] GetLastError () returned 0x12 [0055.697] SetLastError (dwErrCode=0x12) [0055.697] GetLastError () returned 0x12 [0055.697] SetLastError (dwErrCode=0x12) [0055.697] GetLastError () returned 0x12 [0055.697] SetLastError (dwErrCode=0x12) [0055.697] GetLastError () returned 0x12 [0055.697] SetLastError (dwErrCode=0x12) [0055.697] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589df8 [0055.697] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x58ff28 [0055.697] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x58fe20 [0055.698] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x58fc88 [0055.698] GetLastError () returned 0x12 [0055.698] SetLastError (dwErrCode=0x12) [0055.698] GetLastError () returned 0x12 [0055.698] SetLastError (dwErrCode=0x12) [0055.698] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589e68 [0055.698] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589ef8 [0055.698] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589dc8 [0055.698] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x5895c8 [0055.698] GetLastError () returned 0x12 [0055.698] SetLastError (dwErrCode=0x12) [0055.698] GetLastError () returned 0x12 [0055.698] SetLastError (dwErrCode=0x12) [0055.698] GetLastError () returned 0x12 [0055.698] SetLastError (dwErrCode=0x12) [0055.698] GetLastError () returned 0x12 [0055.698] SetLastError (dwErrCode=0x12) [0055.698] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589ea8 [0055.698] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589ec8 [0055.699] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d48 [0055.699] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589e88 [0055.699] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589b68 [0055.699] GetLastError () returned 0x12 [0055.699] SetLastError (dwErrCode=0x12) [0055.699] GetLastError () returned 0x12 [0055.699] SetLastError (dwErrCode=0x12) [0055.699] GetLastError () returned 0x12 [0055.699] SetLastError (dwErrCode=0x12) [0055.699] GetLastError () returned 0x12 [0055.699] SetLastError (dwErrCode=0x12) [0055.699] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e28 [0055.699] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589ed8 [0055.699] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d68 [0055.699] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589d28 [0055.699] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c0f8 [0055.699] GetLastError () returned 0x12 [0055.699] SetLastError (dwErrCode=0x12) [0055.699] GetLastError () returned 0x12 [0055.699] SetLastError (dwErrCode=0x12) [0055.699] GetLastError () returned 0x12 [0055.699] SetLastError (dwErrCode=0x12) [0055.699] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589988 [0055.699] SetLastError (dwErrCode=0x12) [0055.699] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda44, cchData=2 | out: lpLCData="0") returned 2 [0055.699] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58feb0 [0055.699] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x590880 [0055.699] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x583530 [0055.699] GetLastError () returned 0x12 [0055.699] SetLastError (dwErrCode=0x12) [0055.700] GetLastError () returned 0x12 [0055.700] SetLastError (dwErrCode=0x12) [0055.700] GetLastError () returned 0x12 [0055.700] SetLastError (dwErrCode=0x12) [0055.700] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589e98 [0055.700] GetLastError () returned 0x12 [0055.700] SetLastError (dwErrCode=0x12) [0055.700] GetLastError () returned 0x12 [0055.700] SetLastError (dwErrCode=0x12) [0055.700] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x590d10 [0055.700] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x590dd0 [0055.700] SetLastError (dwErrCode=0x12) [0055.700] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589d38 [0055.700] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x218 [0055.710] Process32FirstW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0055.711] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0055.712] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0055.713] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0055.714] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0055.714] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0055.715] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0055.716] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0055.717] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0055.718] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.726] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0055.734] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0055.745] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.754] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0055.755] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x61, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.756] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.756] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.757] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.758] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.759] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.760] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.761] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.762] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.763] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.763] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0055.764] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.765] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0055.766] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0055.767] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.768] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0055.769] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0055.769] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0055.770] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0055.771] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0055.772] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0055.774] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0055.775] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0055.776] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0055.777] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending-windsor.exe")) returned 1 [0055.778] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="workers_offline_scripts.exe")) returned 1 [0055.779] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sharesamerican.exe")) returned 1 [0055.780] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x764, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="clara-cancer-holder.exe")) returned 1 [0055.781] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="authoracrossci.exe")) returned 1 [0055.782] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="critics_herbal_amplifier.exe")) returned 1 [0055.820] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hugestdlook.exe")) returned 1 [0055.820] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="terraceregistered.exe")) returned 1 [0055.821] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x514, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="poly_actually.exe")) returned 1 [0055.822] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="inn.exe")) returned 1 [0055.823] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fluidheating.exe")) returned 1 [0055.824] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0055.825] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="qualifications.exe")) returned 1 [0055.826] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="lauderdale transmitted washer.exe")) returned 1 [0055.827] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane.exe")) returned 1 [0055.828] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="saving.exe")) returned 1 [0055.829] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd40, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fred_j_species.exe")) returned 1 [0055.829] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="poster.exe")) returned 1 [0055.830] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept cheaper.exe")) returned 1 [0055.831] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="shooting.exe")) returned 1 [0055.832] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="protection.exe")) returned 1 [0055.833] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0055.834] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0055.835] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0055.835] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0055.836] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0055.837] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0055.838] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0055.839] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0055.840] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0055.841] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0055.842] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0055.842] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0055.843] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0055.844] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0055.845] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0055.846] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0055.847] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0055.847] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0055.848] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0055.850] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0055.850] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0055.851] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0055.852] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0055.853] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0055.863] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0055.864] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0055.865] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0055.865] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0055.866] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0055.867] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0055.868] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0055.869] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0055.870] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0055.871] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0055.872] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0055.872] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0055.873] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0055.874] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0055.875] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0055.876] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0055.877] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0055.877] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0055.878] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0055.879] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bra acoustic sink.exe")) returned 1 [0055.880] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="langaprsubmit.exe")) returned 1 [0055.881] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1110, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0055.882] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0055.883] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0055.883] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0055.884] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0055.885] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0055.886] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0055.887] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x126c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.888] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11fc, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0055.889] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11e4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0055.890] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1170, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0055.891] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1170, pcPriClassBase=8, dwFlags=0x0, szExeFile="vinfk.exe")) returned 1 [0055.891] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.892] Process32NextW (in: hSnapshot=0x218, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0055.893] CloseHandle (hObject=0x218) returned 1 [0055.893] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0c0 | out: hHeap=0x570000) returned 1 [0055.893] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58e0c0 [0055.893] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d968 [0055.893] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d968 | out: hHeap=0x570000) returned 1 [0055.893] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58daf8 [0055.893] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58db20 [0055.893] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58daf8 | out: hHeap=0x570000) returned 1 [0055.893] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x5834f0 [0055.893] GetLastError () returned 0x12 [0055.893] SetLastError (dwErrCode=0x12) [0055.893] GetLastError () returned 0x12 [0055.893] SetLastError (dwErrCode=0x12) [0055.893] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x57b428 [0055.893] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0055.893] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0055.893] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d38 | out: hHeap=0x570000) returned 1 [0055.893] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590d10 | out: hHeap=0x570000) returned 1 [0055.893] GetLastError () returned 0x12 [0055.893] SetLastError (dwErrCode=0x12) [0055.894] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589f58 [0055.894] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x58a078 [0055.894] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589f98 [0055.894] GetLastError () returned 0x12 [0055.894] SetLastError (dwErrCode=0x12) [0055.894] GetLastError () returned 0x12 [0055.894] SetLastError (dwErrCode=0x12) [0055.894] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e0f0 [0055.894] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0055.894] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0055.894] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f58 | out: hHeap=0x570000) returned 1 [0055.894] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0055.894] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f98 | out: hHeap=0x570000) returned 1 [0055.894] GetLastError () returned 0x12 [0055.894] SetLastError (dwErrCode=0x12) [0055.894] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589f78 [0055.894] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x58a0b8 [0055.894] GetLastError () returned 0x12 [0055.894] SetLastError (dwErrCode=0x12) [0055.894] GetLastError () returned 0x12 [0055.894] SetLastError (dwErrCode=0x12) [0055.894] GetLastError () returned 0x12 [0055.894] SetLastError (dwErrCode=0x12) [0055.894] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589fd8 [0055.894] GetLastError () returned 0x12 [0055.894] SetLastError (dwErrCode=0x12) [0055.894] GetLastError () returned 0x12 [0055.894] SetLastError (dwErrCode=0x12) [0055.894] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e1b0 [0055.894] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0055.895] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0055.895] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f78 | out: hHeap=0x570000) returned 1 [0055.895] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0055.895] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fd8 | out: hHeap=0x570000) returned 1 [0055.895] GetLastError () returned 0x12 [0055.895] SetLastError (dwErrCode=0x12) [0055.895] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x58a018 [0055.895] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0b8 | out: hHeap=0x570000) returned 1 [0055.895] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a078 | out: hHeap=0x570000) returned 1 [0055.895] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d9b8 [0055.895] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x58a0b8 [0055.895] GetLastError () returned 0x12 [0055.895] SetLastError (dwErrCode=0x12) [0055.895] GetLastError () returned 0x12 [0055.895] SetLastError (dwErrCode=0x12) [0055.895] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e0f0 [0055.895] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0055.895] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0055.895] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a018 | out: hHeap=0x570000) returned 1 [0055.895] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e1b0 | out: hHeap=0x570000) returned 1 [0055.895] GetLastError () returned 0x12 [0055.895] SetLastError (dwErrCode=0x12) [0055.895] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589fc8 [0055.895] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x58a028 [0055.895] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589fa8 [0055.895] GetLastError () returned 0x12 [0055.895] SetLastError (dwErrCode=0x12) [0055.895] GetLastError () returned 0x12 [0055.895] SetLastError (dwErrCode=0x12) [0055.896] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x58e1b0 [0055.896] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x58f290 [0055.896] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0055.896] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fc8 | out: hHeap=0x570000) returned 1 [0055.896] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0055.896] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fa8 | out: hHeap=0x570000) returned 1 [0055.896] GetLastError () returned 0x12 [0055.896] SetLastError (dwErrCode=0x12) [0055.896] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589fd8 [0055.896] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589fe8 [0055.896] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581690 [0055.896] GetLastError () returned 0x12 [0055.896] SetLastError (dwErrCode=0x12) [0055.896] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58ba78 [0055.896] GetLastError () returned 0x12 [0055.896] SetLastError (dwErrCode=0x12) [0055.896] GetLastError () returned 0x12 [0055.896] SetLastError (dwErrCode=0x12) [0055.896] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xa0) returned 0x58bc80 [0055.896] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a0c8 [0055.896] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a038 [0055.896] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5815b0 [0055.896] GetLastError () returned 0x12 [0055.896] SetLastError (dwErrCode=0x12) [0055.896] GetLastError () returned 0x12 [0055.896] SetLastError (dwErrCode=0x12) [0055.896] GetLastError () returned 0x12 [0055.896] SetLastError (dwErrCode=0x12) [0055.896] GetLastError () returned 0x12 [0055.896] SetLastError (dwErrCode=0x12) [0055.897] GetLastError () returned 0x12 [0055.897] SetLastError (dwErrCode=0x12) [0055.897] GetLastError () returned 0x12 [0055.897] SetLastError (dwErrCode=0x12) [0055.897] GetLastError () returned 0x12 [0055.897] SetLastError (dwErrCode=0x12) [0055.897] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a068 [0055.897] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x6) returned 0x589fc8 [0055.897] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x5) returned 0x58a048 [0055.897] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589ff8 [0055.897] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x579538 [0055.897] GetLastError () returned 0x12 [0055.897] SetLastError (dwErrCode=0x12) [0055.897] GetLastError () returned 0x12 [0055.897] SetLastError (dwErrCode=0x12) [0055.897] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a098 [0055.897] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f38 [0055.897] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f98 [0055.897] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589508 [0055.897] GetLastError () returned 0x12 [0055.897] SetLastError (dwErrCode=0x12) [0055.897] GetLastError () returned 0x12 [0055.897] SetLastError (dwErrCode=0x12) [0055.897] GetLastError () returned 0x12 [0055.897] SetLastError (dwErrCode=0x12) [0055.897] GetLastError () returned 0x12 [0055.897] SetLastError (dwErrCode=0x12) [0055.897] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f68 [0055.897] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f48 [0055.897] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a0d8 [0055.898] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a058 [0055.898] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x5899e8 [0055.898] GetLastError () returned 0x12 [0055.898] SetLastError (dwErrCode=0x12) [0055.898] GetLastError () returned 0x12 [0055.898] SetLastError (dwErrCode=0x12) [0055.898] GetLastError () returned 0x12 [0055.898] SetLastError (dwErrCode=0x12) [0055.898] GetLastError () returned 0x12 [0055.898] SetLastError (dwErrCode=0x12) [0055.898] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f18 [0055.898] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a008 [0055.898] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x58a018 [0055.898] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x58a0a8 [0055.898] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58bf68 [0055.898] GetLastError () returned 0x12 [0055.898] SetLastError (dwErrCode=0x12) [0055.898] GetLastError () returned 0x12 [0055.898] SetLastError (dwErrCode=0x12) [0055.898] GetLastError () returned 0x12 [0055.898] SetLastError (dwErrCode=0x12) [0055.898] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589868 [0055.898] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589c28 [0055.898] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589868 | out: hHeap=0x570000) returned 1 [0055.898] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x56) returned 0x5897a8 [0055.898] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x579f68 [0055.898] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x58e0f0 [0055.898] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579f68 | out: hHeap=0x570000) returned 1 [0055.898] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x87) returned 0x579f68 [0055.898] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xd) returned 0x5794d8 [0055.898] GetLastError () returned 0x12 [0055.898] SetLastError (dwErrCode=0x12) [0055.898] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda68, cchData=2 | out: lpLCData="0") returned 2 [0055.899] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x579430 [0055.899] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x58f290 [0055.899] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c0f8 [0055.899] GetLastError () returned 0x12 [0055.899] SetLastError (dwErrCode=0x12) [0055.899] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x58f720 [0055.899] GetLastError () returned 0x12 [0055.899] SetLastError (dwErrCode=0x12) [0055.899] GetLastError () returned 0x12 [0055.899] SetLastError (dwErrCode=0x12) [0055.899] GetLastError () returned 0x12 [0055.899] SetLastError (dwErrCode=0x12) [0055.899] GetLastError () returned 0x12 [0055.899] SetLastError (dwErrCode=0x12) [0055.899] GetLastError () returned 0x12 [0055.899] SetLastError (dwErrCode=0x12) [0055.899] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a078 [0055.899] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x58a088 [0055.899] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x581430 [0055.899] GetLastError () returned 0x12 [0055.899] SetLastError (dwErrCode=0x12) [0055.899] GetLastError () returned 0x12 [0055.899] SetLastError (dwErrCode=0x12) [0055.899] GetLastError () returned 0x12 [0055.899] SetLastError (dwErrCode=0x12) [0055.899] GetLastError () returned 0x12 [0055.899] SetLastError (dwErrCode=0x12) [0055.899] GetLastError () returned 0x12 [0055.900] SetLastError (dwErrCode=0x12) [0055.900] GetLastError () returned 0x12 [0055.900] SetLastError (dwErrCode=0x12) [0055.900] GetLastError () returned 0x12 [0055.900] SetLastError (dwErrCode=0x12) [0055.900] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589f28 [0055.900] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x579448 [0055.900] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x57b8b8 [0055.900] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x57bc18 [0055.900] GetLastError () returned 0x12 [0055.900] SetLastError (dwErrCode=0x12) [0055.900] GetLastError () returned 0x12 [0055.900] SetLastError (dwErrCode=0x12) [0055.900] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f58 [0055.900] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f78 [0055.900] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f88 [0055.900] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589bc8 [0055.900] GetLastError () returned 0x12 [0055.900] SetLastError (dwErrCode=0x12) [0055.900] GetLastError () returned 0x12 [0055.900] SetLastError (dwErrCode=0x12) [0055.900] GetLastError () returned 0x12 [0055.900] SetLastError (dwErrCode=0x12) [0055.900] GetLastError () returned 0x12 [0055.900] SetLastError (dwErrCode=0x12) [0055.900] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589fa8 [0055.900] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589fb8 [0055.900] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d58 [0055.900] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589dc8 [0055.900] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589aa8 [0055.901] GetLastError () returned 0x12 [0055.901] SetLastError (dwErrCode=0x12) [0055.901] GetLastError () returned 0x12 [0055.901] SetLastError (dwErrCode=0x12) [0055.901] GetLastError () returned 0x12 [0055.919] SetLastError (dwErrCode=0x12) [0055.919] GetLastError () returned 0x12 [0055.919] SetLastError (dwErrCode=0x12) [0055.919] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e28 [0055.919] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589e98 [0055.919] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d38 [0055.919] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589e68 [0055.919] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c2d8 [0055.920] GetLastError () returned 0x12 [0055.920] SetLastError (dwErrCode=0x12) [0055.920] GetLastError () returned 0x12 [0055.920] SetLastError (dwErrCode=0x12) [0055.920] GetLastError () returned 0x12 [0055.920] SetLastError (dwErrCode=0x12) [0055.927] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x57b428 [0055.927] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xac) returned 0x58f928 [0055.927] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0055.927] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xac) returned 0x57b428 [0055.927] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10e) returned 0x58f9e0 [0055.927] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10e) returned 0x58faf8 [0055.927] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f9e0 | out: hHeap=0x570000) returned 1 [0055.927] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10e) returned 0x58f9e0 [0055.927] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x58da58 [0055.927] GetLastError () returned 0x12 [0055.927] SetLastError (dwErrCode=0x12) [0055.927] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda54, cchData=2 | out: lpLCData="0") returned 2 [0055.928] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58ffa0 [0055.928] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x590018 [0055.928] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x5834b0 [0055.928] GetLastError () returned 0x12 [0055.928] SetLastError (dwErrCode=0x12) [0055.928] GetLastError () returned 0x12 [0055.928] SetLastError (dwErrCode=0x12) [0055.928] GetLastError () returned 0x12 [0055.928] SetLastError (dwErrCode=0x12) [0055.928] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c148 [0055.928] GetLastError () returned 0x12 [0055.928] SetLastError (dwErrCode=0x12) [0055.928] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x200) returned 0x5904a8 [0055.928] GetLastError () returned 0x12 [0055.928] SetLastError (dwErrCode=0x12) [0055.928] GetLastError () returned 0x12 [0055.928] SetLastError (dwErrCode=0x12) [0055.928] GetLastError () returned 0x12 [0055.928] SetLastError (dwErrCode=0x12) [0055.928] GetLastError () returned 0x12 [0055.928] SetLastError (dwErrCode=0x12) [0055.928] GetLastError () returned 0x12 [0055.928] SetLastError (dwErrCode=0x12) [0055.928] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589f08 [0055.928] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589db8 [0055.928] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x18) returned 0x5815f0 [0055.928] GetLastError () returned 0x12 [0055.928] SetLastError (dwErrCode=0x12) [0055.928] GetLastError () returned 0x12 [0055.928] SetLastError (dwErrCode=0x12) [0055.929] GetLastError () returned 0x12 [0055.929] SetLastError (dwErrCode=0x12) [0055.929] GetLastError () returned 0x12 [0055.929] SetLastError (dwErrCode=0x12) [0055.929] GetLastError () returned 0x12 [0055.929] SetLastError (dwErrCode=0x12) [0055.929] GetLastError () returned 0x12 [0055.929] SetLastError (dwErrCode=0x12) [0055.929] GetLastError () returned 0x12 [0055.929] SetLastError (dwErrCode=0x12) [0055.929] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e18 [0055.929] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xc) returned 0x58ff70 [0055.929] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x58ff40 [0055.929] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x10) returned 0x58ffb8 [0055.929] GetLastError () returned 0x12 [0055.929] SetLastError (dwErrCode=0x12) [0055.929] GetLastError () returned 0x12 [0055.929] SetLastError (dwErrCode=0x12) [0055.929] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589dd8 [0055.929] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589de8 [0055.929] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x8) returned 0x589df8 [0055.929] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589c88 [0055.929] GetLastError () returned 0x12 [0055.929] SetLastError (dwErrCode=0x12) [0055.929] GetLastError () returned 0x12 [0055.929] SetLastError (dwErrCode=0x12) [0055.929] GetLastError () returned 0x12 [0055.929] SetLastError (dwErrCode=0x12) [0055.929] GetLastError () returned 0x12 [0055.929] SetLastError (dwErrCode=0x12) [0055.929] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589ee8 [0055.929] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589e88 [0055.930] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d48 [0055.930] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589e08 [0055.930] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x58) returned 0x589808 [0055.930] GetLastError () returned 0x12 [0055.930] SetLastError (dwErrCode=0x12) [0055.930] GetLastError () returned 0x12 [0055.930] SetLastError (dwErrCode=0x12) [0055.930] GetLastError () returned 0x12 [0055.930] SetLastError (dwErrCode=0x12) [0055.930] GetLastError () returned 0x12 [0055.930] SetLastError (dwErrCode=0x12) [0055.930] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1) returned 0x589e38 [0055.930] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589e48 [0055.930] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2) returned 0x589d88 [0055.930] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589ea8 [0055.930] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x44) returned 0x58c198 [0055.930] GetLastError () returned 0x12 [0055.930] SetLastError (dwErrCode=0x12) [0055.930] GetLastError () returned 0x12 [0055.930] SetLastError (dwErrCode=0x12) [0055.930] GetLastError () returned 0x12 [0055.930] SetLastError (dwErrCode=0x12) [0055.930] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589568 [0055.930] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589c28 | out: hHeap=0x570000) returned 1 [0055.930] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x56) returned 0x589988 [0055.930] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589568 | out: hHeap=0x570000) returned 1 [0055.930] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xac) returned 0x5906b0 [0055.930] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x590768 [0055.930] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0055.930] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x87) returned 0x58e0f0 [0055.930] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590768 | out: hHeap=0x570000) returned 1 [0055.930] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x10e) returned 0x590768 [0055.930] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x58dd00 [0055.930] GetLastError () returned 0x12 [0055.931] SetLastError (dwErrCode=0x12) [0055.931] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x10fda44, cchData=2 | out: lpLCData="0") returned 2 [0055.931] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0xc) returned 0x58ff58 [0055.931] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x486) returned 0x590880 [0055.931] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x34) returned 0x583530 [0055.931] GetLastError () returned 0x12 [0055.931] SetLastError (dwErrCode=0x12) [0055.931] GetLastError () returned 0x12 [0055.931] SetLastError (dwErrCode=0x12) [0055.931] GetLastError () returned 0x12 [0055.931] SetLastError (dwErrCode=0x12) [0055.931] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0b8 | out: hHeap=0x570000) returned 1 [0055.931] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x58a0b8 [0055.931] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x589e58 [0055.931] GetLastError () returned 0x12 [0055.931] SetLastError (dwErrCode=0x12) [0055.931] GetLastError () returned 0x12 [0055.931] SetLastError (dwErrCode=0x12) [0055.931] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb8) returned 0x590d10 [0055.931] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6a6) returned 0x590dd0 [0055.931] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590dd0 | out: hHeap=0x570000) returned 1 [0055.931] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fd8 | out: hHeap=0x570000) returned 1 [0055.931] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e1b0 | out: hHeap=0x570000) returned 1 [0055.931] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e58 | out: hHeap=0x570000) returned 1 [0055.931] GetLastError () returned 0x12 [0055.931] SetLastError (dwErrCode=0x12) [0055.931] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x6) returned 0x589d98 [0055.932] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fe8 | out: hHeap=0x570000) returned 1 [0055.932] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a028 | out: hHeap=0x570000) returned 1 [0055.932] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58faf8 | out: hHeap=0x570000) returned 1 [0055.932] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f928 | out: hHeap=0x570000) returned 1 [0055.932] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58e0f0 | out: hHeap=0x570000) returned 1 [0055.932] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589988 | out: hHeap=0x570000) returned 1 [0055.932] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5834b0 | out: hHeap=0x570000) returned 1 [0055.932] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0b8 | out: hHeap=0x570000) returned 1 [0055.932] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x2) returned 0x589fd8 [0055.932] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58d940 [0055.932] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20) returned 0x58ddc8 [0055.932] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x30) returned 0x588908 [0055.932] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ddc8 | out: hHeap=0x570000) returned 1 [0055.932] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d940 | out: hHeap=0x570000) returned 1 [0055.932] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x583530 | out: hHeap=0x570000) returned 1 [0055.932] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590880 | out: hHeap=0x570000) returned 1 [0055.932] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ff58 | out: hHeap=0x570000) returned 1 [0055.932] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5906b0 | out: hHeap=0x570000) returned 1 [0055.932] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590768 | out: hHeap=0x570000) returned 1 [0055.932] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58dd00 | out: hHeap=0x570000) returned 1 [0055.932] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c198 | out: hHeap=0x570000) returned 1 [0055.932] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e38 | out: hHeap=0x570000) returned 1 [0055.932] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e48 | out: hHeap=0x570000) returned 1 [0055.932] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d88 | out: hHeap=0x570000) returned 1 [0055.932] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ea8 | out: hHeap=0x570000) returned 1 [0055.932] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589808 | out: hHeap=0x570000) returned 1 [0055.932] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ee8 | out: hHeap=0x570000) returned 1 [0055.932] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e88 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d48 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e08 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589c88 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589df8 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589de8 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589dd8 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ffb8 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e18 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ff70 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ff40 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5815f0 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589db8 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f08 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5904a8 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c148 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5834f0 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x590018 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ffa0 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b428 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f9e0 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58da58 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c2d8 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e28 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e98 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d38 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589e68 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589aa8 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fa8 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fb8 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589d58 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589dc8 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589bc8 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f88 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f78 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f58 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57bc18 | out: hHeap=0x570000) returned 1 [0055.933] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f28 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579448 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57b8b8 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581430 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a088 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a078 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f720 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58c0f8 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58f290 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579430 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5897a8 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579f68 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5794d8 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58bf68 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f18 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a008 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a018 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0a8 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5899e8 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f68 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f48 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0d8 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a058 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589508 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f98 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589f38 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a098 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x579538 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589ff8 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a068 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fc8 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a048 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5815b0 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a038 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58a0c8 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ba78 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x581690 | out: hHeap=0x570000) returned 1 [0055.934] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58bc80 | out: hHeap=0x570000) returned 1 [0055.935] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x589fd8 | out: hHeap=0x570000) returned 1 [0055.935] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58d9b8 | out: hHeap=0x570000) returned 1 [0055.935] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x22) returned 0x580d88 [0055.935] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x588908 | out: hHeap=0x570000) returned 1 [0055.935] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x210 [0055.945] Process32FirstW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0055.946] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0055.946] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0055.947] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0055.948] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0055.949] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0055.950] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0055.951] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0055.952] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0055.953] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.954] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0055.954] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0055.956] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.957] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0055.957] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x61, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.958] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.959] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.960] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.961] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.962] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.962] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.972] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.973] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.973] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.974] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0055.975] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.976] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0055.977] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0055.978] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.978] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0055.980] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0055.980] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0055.981] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0055.982] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0055.983] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0055.984] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0055.985] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0055.985] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0055.986] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending-windsor.exe")) returned 1 [0055.987] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="workers_offline_scripts.exe")) returned 1 [0055.988] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sharesamerican.exe")) returned 1 [0055.989] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x764, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="clara-cancer-holder.exe")) returned 1 [0055.990] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="authoracrossci.exe")) returned 1 [0055.991] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="critics_herbal_amplifier.exe")) returned 1 [0055.992] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hugestdlook.exe")) returned 1 [0055.993] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="terraceregistered.exe")) returned 1 [0055.994] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x514, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="poly_actually.exe")) returned 1 [0055.995] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="inn.exe")) returned 1 [0055.996] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fluidheating.exe")) returned 1 [0055.996] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0055.997] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="qualifications.exe")) returned 1 [0055.998] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="lauderdale transmitted washer.exe")) returned 1 [0055.999] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane.exe")) returned 1 [0056.000] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="saving.exe")) returned 1 [0056.001] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd40, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fred_j_species.exe")) returned 1 [0056.001] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="poster.exe")) returned 1 [0056.002] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="concept cheaper.exe")) returned 1 [0056.003] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="shooting.exe")) returned 1 [0056.004] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="protection.exe")) returned 1 [0056.005] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0056.006] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0056.007] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0056.007] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0056.008] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0056.009] Process32NextW (in: hSnapshot=0x210, lppe=0x10fe1e0 | out: lppe=0x10fe1e0*(dwSize=0x22c, cntUsage=0x0, th